last executing test programs: 12.580793299s ago: executing program 2 (id=639): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/fs/netfs/volumes\x00', 0x40080, 0x0) pread64$auto(r4, 0x0, 0x8100000041, 0x413e) clock_nanosleep$auto(0xfffffff2, 0x5, 0x0, 0x0) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) fsopen$auto(0x0, 0x1) madvise$auto(0xfffffffffffffffa, 0x9, 0x19) waitid$auto_P_PIDFD(0x3, r1, &(0x7f0000000040)={@siginfo_0_0={0x2, 0x4, 0x0, @_rt={0xffffffffffffffff, 0x0, @sival_ptr=&(0x7f0000000280)="79ca6170c72c9b5affac767c0127e58e38f3f407303ed544651fc514ea2bf3a8d8ec1b5efc99d62cbb8043d4582607afd440f400a4fdcd74a0d6cc759ee437d05a5a149e70f79615cb36ed421aea340b2fe64c6f0439d9294cee642b94067691cdb8738f2363b14d75159d50f1d2041552ec66151a9f701e52dbbc1da461754f08314b0d6bbb04733b1e75896aa1d04e8e80eeef31efb7c1d6d29923d10bb06fc202e8c6970da24c428b428a45a8146761b0799727aa98dee9a474d1ec2011619ef92795e56f01adc6944105d7bf5c917ab81c899a21ee50a5ef56db545f7c67b8077183bc65"}}}, 0x20f5, &(0x7f0000000440)={{0x0, 0x80}, {0x8, 0x3}, 0xc2, 0xfffffffffffffff1, 0x80000001, 0x9, 0x1, 0xffffffffffffffff, 0x101, 0x101, 0xfff, 0x0, 0x3, 0x9, 0x8, 0xfffffffffffffffa}) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) socket(0x1d, 0x3, 0x1) ptrace$auto(0x4206, 0x1, 0x100000000, 0xe855) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r5, r5, 0x0, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x3) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syzkaller1\x00'}) 10.362989698s ago: executing program 2 (id=645): r0 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="100000000214af"], 0x14}, 0x1, 0x0, 0x0, 0x20000045}, 0x24000044) write$auto(r0, &(0x7f0000000100)='\x00', 0xfffffffffffffffa) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.7/usb8/remove\x00', 0xa001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) memfd_secret$auto(0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x17, 0x0) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto_SHMEM_HUGE_NEVER(r1, 0x1, &(0x7f0000000000)='-\x00', &(0x7f0000000040), 0x0) setrlimit$auto(0x7ffb, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x40004) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone3(&(0x7f0000000340)={0x1045100, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) read$auto(r2, 0x0, 0x39b8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/queue/scheduler\x00', 0x103a42, 0x0) syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000100), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) socket(0x11, 0x80003, 0x304) mmap$auto(0x0, 0x1fffffffffff, 0x3, 0xdd59, 0xffffffffffffffff, 0x8002) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40602, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) 10.356535318s ago: executing program 3 (id=646): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000040)='/\xc8\xa5\x83\x1c\xe0\x8a\xeb\xce\xfb\xa8\xe3k\xba/>\xa7dev/audio1\x00', 0x100000a3d9) sysfs$auto(0x2, 0x23, 0x0) r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r2, 0x0, 0x4) r3 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, 0x0, 0x2482, 0x0) close_range$auto(0x2, 0x8, 0x0) select$auto(0x79c9, &(0x7f0000000200)={[0x0, 0x8, 0x4, 0x7f, 0x8, 0x7, 0x9, 0x7, 0x10000, 0x0, 0x7, 0x7, 0xdb, 0x8, 0x5ae, 0x6]}, &(0x7f00000003c0)={[0x4, 0x8, 0x8, 0x6, 0x7, 0x5, 0x6e9b, 0x0, 0x0, 0x10, 0x588, 0x1, 0x6f, 0x8, 0x6, 0x80000001]}, &(0x7f0000000440)={[0x4, 0x5ee7, 0x7, 0x80000, 0xffffffffffffff01, 0x1, 0x400, 0xe, 0x2, 0x2, 0x9, 0xbf87, 0x0, 0xfffffffffffffffd, 0x3, 0x81]}, &(0x7f0000000140)={0x401, 0x1}) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) getsockopt$auto_SO_NETNS_COOKIE(r0, 0x7, 0x47, &(0x7f0000000380)='-\xc8\xa5\x83\x1c\xe0\x8a\xeb\xcc\xfb\xa8\xe3k\b/*\xa7dev/audio1\x00q>l. <\xb0', &(0x7f00000001c0)=0x9) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) mmap$auto(0x1000, 0xffffffffffffff00, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0xd364, &(0x7f0000000000)={0x400, 0x10002, 0x7f, 0x7, 0x6, 0x5, r5, [], {0x2, 0x4, 0x6, 0x2, 0x40, 0x4, 0x7, 0x7, 0x80000000}, {0x7, 0x1ff, 0x80000001, 0x8, 0x6b, 0x9, 0x0, 0xfffffffa, 0xb1}}) sendmsg$auto_IPVS_CMD_SET_DEST(r1, &(0x7f0000000a40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000500)={0x3d0, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xd5, 0x1, 0x0, 0x1, [@generic="303c31fa3369ce48eb19a36f293d67232b03c93422d4b13bb910c82f5f3d0f957df74c337e2b5a056d42838bd7643715b4e107f92a3f2cd6ceb9ef0d7a736f876a2230834fcf4733fea2eaab27823d84b9fd740f92044946baed73917984f87be1a4528622fdd54fcab1868c2e", @typed={0x8, 0x80, 0x0, 0x0, @pid}, @generic="382f0949df58942078e6c30d79f107ba42847e9f62bdd48fad56c2dfeade393113e27e99890b317f721b8decbdcd84fac8fdb4255207210927b4b1bc83c9d6acc4c0936a7541a7fbc09d206888ae47a4b1d1b5775768f1cfe64e6717"]}, @IPVS_CMD_ATTR_DEST={0xf8, 0x2, 0x0, 0x1, [@generic="a1c2257f11457f4aaaf1a1208bbbb392453d2fd866551951c58c6aa9afaa32e32adee764c09ac952d5268b6f55e59d493f975dcf2c207107955f135679ec12ca92311de0e0512029387704dcbe3ede1e4559bc25b8989cbad40cd062d4eeb58436fc34fc72fecc7df41faf3d69c8cbc9cf5cce1944a7f6ee24fef022580490b9ca74e58ac9074f259f474c8f1a59370b713da10d000e7c470dafad522530bca862b68a64d691fb23fc5d22a0c41b30e62d7fd3c3169ac53b1a27add13bb4f791106deb6f11755f202c2ce78f3ab8188888a9ee4ecf995ee9c520676f814ffcdc41be79fad923ed7d7127c05c", @typed={0x8, 0x124, 0x0, 0x0, @uid}]}, @IPVS_CMD_ATTR_DEST={0x35, 0x2, 0x0, 0x1, [@generic="50fb692dd6d9cc3d2f401e54b43b2ad76f368444ae067183d8beef8c443f1a4c44d9f9d0ac301db2626a19e028d9d31499"]}, @IPVS_CMD_ATTR_SERVICE={0x1b2, 0x1, 0x0, 0x1, [@typed={0x9, 0x38, 0x0, 0x0, @str=']*}\'\x00'}, @generic="fcc0ca4b9403ed2b7c68fe10c584066388c76cc2cbb0bd010e45c3dcd9a021037e4c1fb35a2aacec3d11b2b2e35e7a58dca9bd6f645e000ff8ae3e28c9ec8e0817cbf5d5a232e5cf1089cf26e56fa5a188db774a311c40f9a377274aeefcd13bef4acdbe856605221d70234ddb1e0d2409807d5c8ef81507e011", @nested={0x14, 0x17, 0x0, 0x1, [@typed={0x8, 0xe7, 0x0, 0x0, @u32=0x7ff}, @typed={0x5, 0xf3, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0x114, 0x0, 0x0, @fd=r5}, @typed={0x8, 0xc1, 0x0, 0x0, @fd=r3}, @nested={0x14, 0xc, 0x0, 0x1, [@nested={0x4, 0xf2}, @typed={0x7, 0x12e, 0x0, 0x0, @str='-&\x00'}, @nested={0x4, 0xcf}]}, @nested={0xcc, 0x8f, 0x0, 0x1, [@typed={0x4, 0x147}, @typed={0x8, 0x9b, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="8a669fc1d50e07d13226ff88baefd81fe0cc72a97bfbb9a4744011135deea3201fc6888b", @typed={0x14, 0x14c, 0x0, 0x0, @ipv6=@local}, @generic="b1b7ea1d16afabb2b85984e6a85e0d0110bd02593a41e3637174eb14475f5669d2a0caf85511d525ac20f6c48ee576453b2d42362b4fda0a2ea2f2526835ecd3ecb265555d0c977f6888b7826324af59eae612a7c356c7aeb4ce0d0e77c0514ff6f16fd6fe2bf8e852ea60d2ae7d0405479b0ee255bb373b7310d7c9d302c543", @nested={0x4, 0xe4}]}, @typed={0x22, 0xe3, 0x0, 0x0, @str='/sys/power/pm_trace_dev_match\x00'}]}]}, 0x3d0}, 0x1, 0x0, 0x0, 0x10}, 0x20040011) ioctl$auto_PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2082, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000280)=""/175, 0xaf) r6 = socket(0xa, 0x800, 0xa) connect$auto(r6, &(0x7f0000000000)=@generic={0x0, "ff20e100002000"}, 0x58) recvmmsg$auto(0x3, 0x0, 0x3, 0x3, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) shutdown$auto(0x200000003, 0x2) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000180), r1) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x480842, 0x0) 9.388771552s ago: executing program 0 (id=648): r0 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r0, 0x0, 0x17) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) mincore$auto(0x1000, 0x8001, 0x0) socket(0x18, 0x80004, 0x1) socket(0x2, 0x3, 0xa) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0) write$auto(r1, &(0x7f0000000140)='0[.[\x00', 0xcd04) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/lru_gen/enabled\x00', 0xb02, 0x0) sendfile$auto(r2, r2, 0x0, 0x1) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x1000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r3, 0x80) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000100)={0x3}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x1008000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x100) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) setsockopt$auto(0x400000000000003, 0x29, 0x1c, 0x0, 0x56b) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 9.302491106s ago: executing program 3 (id=650): mmap$auto(0x5, 0x400008, 0xdf, 0x9b72, 0x2, 0x10001) socket(0x2b, 0x800, 0x0) r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x1, 0x0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x80000, 0x400008, 0xdf, 0x9b71, 0x2, 0x8000) ioctl$auto(r1, 0x800, r0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/devices/platform/vhci_hcd.5/usb20/manufacturer\x00', 0x102b42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8) unshare$auto(0x40000080) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0x101500, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000001080)='/proc/self/mountinfo\x00', 0x121302, 0x0) socket(0x10, 0x2, 0x6) socketpair$auto(0x21, 0x5, 0x8, 0x0) r3 = socket(0x2, 0x1, 0x108) getsockopt$auto_SO_DEBUG(r3, 0x6, 0x1, &(0x7f00000000c0)='/%\x00', &(0x7f0000000100)=0xfea) close_range$auto(0x2, r3, 0x0) open(0x0, 0x22240, 0xf5) socket(0xa, 0x3, 0xfffffff9) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) write$auto(0x3, 0x0, 0x800) socket$nl_generic(0x10, 0x3, 0x10) 7.96353334s ago: executing program 1 (id=652): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/fs/netfs/volumes\x00', 0x40080, 0x0) pread64$auto(r4, 0x0, 0x8100000041, 0x413e) clock_nanosleep$auto(0xfffffff2, 0x5, 0x0, 0x0) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) fsopen$auto(0x0, 0x1) madvise$auto(0xfffffffffffffffa, 0x9, 0x19) waitid$auto_P_PIDFD(0x3, r1, &(0x7f0000000040)={@siginfo_0_0={0x2, 0x4, 0x0, @_rt={0xffffffffffffffff, 0x0, @sival_ptr=&(0x7f0000000280)="79ca6170c72c9b5affac767c0127e58e38f3f407303ed544651fc514ea2bf3a8d8ec1b5efc99d62cbb8043d4582607afd440f400a4fdcd74a0d6cc759ee437d05a5a149e70f79615cb36ed421aea340b2fe64c6f0439d9294cee642b94067691cdb8738f2363b14d75159d50f1d2041552ec66151a9f701e52dbbc1da461754f08314b0d6bbb04733b1e75896aa1d04e8e80eeef31efb7c1d6d29923d10bb06fc202e8c6970da24c428b428a45a8146761b0799727aa98dee9a474d1ec2011619ef92795e56f01adc6944105d7bf5c917ab81c899a21ee50a5ef56db545f7c67b8077183bc65"}}}, 0x20f5, &(0x7f0000000440)={{0x0, 0x80}, {0x8, 0x3}, 0xc2, 0xfffffffffffffff1, 0x80000001, 0x9, 0x1, 0xffffffffffffffff, 0x101, 0x101, 0xfff, 0x0, 0x3, 0x9, 0x8, 0xfffffffffffffffa}) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) socket(0x1d, 0x3, 0x1) ptrace$auto(0x4206, 0x1, 0x100000000, 0xe855) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r5, r5, 0x0, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x3) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syzkaller1\x00'}) 7.708989137s ago: executing program 3 (id=653): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x4082, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) utimensat$auto(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x4000000006, 0x40}, 0x38) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000080)=@ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, 0x54) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60204, 0x0) fsconfig$auto_FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000180)='/dev/snd/midiC2D0\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x6) select$auto(0x6, &(0x7f0000000000)={[0x5, 0x4, 0x4, 0xa, 0xccf9, 0x9, 0xffffffffffffffff, 0x3, 0xb, 0x1, 0x100000000000000, 0x3, 0xfffffffffffffe8f, 0x3, 0x40000000000005, 0xfffffffffffffff5]}, &(0x7f0000000100)={[0x8, 0x200000000005, 0x7, 0x7, 0x8, 0x80000004, 0xc, 0x6, 0x8fc, 0xb80, 0xe34c, 0x9, 0x3, 0xfffffffffffff954, 0xfffffffffffffffc, 0xfff]}, &(0x7f0000000180)={[0x2, 0x8000, 0x4, 0x8000000000000001, 0x7f, 0x0, 0x7, 0x7, 0x8, 0x2, 0x8, 0x10, 0x5, 0xfffffffffffffff4, 0x9, 0x2]}, &(0x7f0000000080)={0x1ff, 0x401}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r1 = openat$auto_memtype_fops_memtype(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) accept$auto(r1, &(0x7f0000000240)=@hci={0x1f, 0x2, 0x1}, &(0x7f0000000280)=0x40) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) socket(0x26, 0x1, 0x200000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC0\x00', 0x40000, 0x0) openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000001080), 0x2800, 0x18) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) 7.042615772s ago: executing program 0 (id=654): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/fs/netfs/volumes\x00', 0x40080, 0x0) pread64$auto(r4, 0x0, 0x8100000041, 0x413e) clock_nanosleep$auto(0xfffffff2, 0x5, 0x0, 0x0) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) fsopen$auto(0x0, 0x1) madvise$auto(0xfffffffffffffffa, 0x9, 0x19) waitid$auto_P_PIDFD(0x3, r1, &(0x7f0000000040)={@siginfo_0_0={0x2, 0x4, 0x0, @_rt={0xffffffffffffffff, 0x0, @sival_ptr=&(0x7f0000000280)="79ca6170c72c9b5affac767c0127e58e38f3f407303ed544651fc514ea2bf3a8d8ec1b5efc99d62cbb8043d4582607afd440f400a4fdcd74a0d6cc759ee437d05a5a149e70f79615cb36ed421aea340b2fe64c6f0439d9294cee642b94067691cdb8738f2363b14d75159d50f1d2041552ec66151a9f701e52dbbc1da461754f08314b0d6bbb04733b1e75896aa1d04e8e80eeef31efb7c1d6d29923d10bb06fc202e8c6970da24c428b428a45a8146761b0799727aa98dee9a474d1ec2011619ef92795e56f01adc6944105d7bf5c917ab81c899a21ee50a5ef56db545f7c67b8077183bc65"}}}, 0x20f5, &(0x7f0000000440)={{0x0, 0x80}, {0x8, 0x3}, 0xc2, 0xfffffffffffffff1, 0x80000001, 0x9, 0x1, 0xffffffffffffffff, 0x101, 0x101, 0xfff, 0x0, 0x3, 0x9, 0x8, 0xfffffffffffffffa}) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) socket(0x1d, 0x3, 0x1) ptrace$auto(0x4206, 0x1, 0x100000000, 0xe855) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r5, r5, 0x0, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x3) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syzkaller1\x00'}) 6.666010478s ago: executing program 3 (id=655): r0 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r0, 0x0, 0x17) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) mincore$auto(0x1000, 0x8001, 0x0) socket(0x18, 0x80004, 0x1) socket(0x2, 0x3, 0xa) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0) write$auto(r1, &(0x7f0000000140)='0[.[\x00', 0xcd04) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/lru_gen/enabled\x00', 0xb02, 0x0) sendfile$auto(r2, r2, 0x0, 0x1) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x1000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r3, 0x80) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000100)={0x3}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x1008000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x100) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) setsockopt$auto(0x400000000000003, 0x29, 0x1c, 0x0, 0x56b) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 6.493311922s ago: executing program 1 (id=656): r0 = openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x2, 0x0) poll$auto(&(0x7f0000000040)={r0, 0x1000, 0x1c9}, 0x2, 0x7) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) r1 = socket(0x18, 0x1, 0xfffffffc) ioctl$auto(0xffffffffffffffff, 0x40084d02, 0xffffffffffffffff) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptywf\x00', 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) socket(0x2, 0x1, 0x106) poll$auto(0x0, 0x5, 0x400) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x3, 0x9) ioctl$auto_AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, 0x0) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/kvm/preemption_reported\x00', 0x105641, 0x0) unshare$auto(0x40000080) mmap$auto(0xfffffffffffffffe, 0x580f, 0x112f4a03, 0x8000000008011, 0x3, 0x0) fadvise64$auto(0xffffffffffffffff, 0x0, 0xffffffff80000001, 0x8) futex_waitv$auto(&(0x7f0000000000)={0xb, 0x7ffffffff000, 0x6}, 0x1, 0x0, 0x0, 0x623d) msgget$auto(0x0, 0x5) msgsnd$auto(0x0, &(0x7f0000000040)={0x5}, 0x1000, 0x4) msgctl$auto(0x0, 0x0, 0x0) statmount$auto(&(0x7f0000000180)={0x9, @inferred, 0x81, 0x0, 0x100000000}, &(0x7f0000000480)={0x7ff, 0xdd, 0x3, 0x1, 0x3, 0xffffffff, 0xffff, 0xfffeffff, 0x85dd, 0x8, 0xfff, 0x6, 0xc48, 0x5, 0x9ea, 0xfffffffffffffffc, 0x542, 0x0, 0xfffffa39, 0x9, 0xd76c, 0x5, 0xf2, 0x400, 0x8, 0x8001, 0x8, 0xf, 0xb, 0x1, 0x10000, [0x7, 0x8001, 0x7ff, 0x8000, 0x1, 0x6, 0x43, 0x7fffffffffffffff, 0x100000001, 0xfffffffffffffff1, 0x65, 0x2, 0x6, 0x4, 0x0, 0xb8, 0x2, 0x1, 0x9, 0x2cc8ff0e, 0x0, 0x1, 0x3, 0x4, 0xfffffffffffffffa, 0x8, 0x3, 0x7fffffffffffffff, 0x7, 0x2, 0x200000000000004f, 0x29a, 0x4, 0x200, 0x6, 0xfa, 0x0, 0x6, 0x8000000000000000, 0x3, 0x3, 0x4, 0x5], "f7513f75280da3c13e6aced0de4d73eb14e6550ccb6eb84d4cca97168d2179f28291776fd25b0548f470d8bdbbc10c2d03dabfed650cd418a2078d87a916bd6e7453042d32ca272eae234fc9f903e18695e478774bcb08f085b4998e79471aaa8dd2e4552c75dc3ed21bd227b64214e28be43309527c35b3e875536213e28de2ebef6564705a537bc17f16689ff20d606c7fd611a304f5d0e82d"}, 0x1, 0xfff) setsockopt$auto(r1, 0x114, 0x8, 0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) ioctl$auto(0x4000000000000c8, 0x400454d9, 0x3) 5.274685287s ago: executing program 3 (id=657): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r0, 0x0, 0x25, 0x0, 0xc) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D1c\x00', 0x1, 0x0) ioctl$auto___SNDRV_PCM_IOCTL_SYNC_PTR642(r1, 0xc0884123, 0x0) ioperm$auto(0x3b, 0xf99b, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = io_uring_setup$auto(0x406, 0x0) io_uring_enter$auto(r2, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) io_uring_enter$auto(0x3, 0x5, 0x5f3, 0x14, 0x0, 0x6) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x745100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x0, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) io_uring_setup$auto(0x59, 0x0) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xd, 0x1, 0x948d, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x64c1, 0x8000001f, 0x8, 0x6d3e, 0xc, 0x2, 0x2]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xfc\x04\x00\x00)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) ioctl$auto(0x3, 0x8905, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0x15, 0xffffffffffffffff, 0x100000001) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) 5.27376505s ago: executing program 2 (id=665): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/packet\x00', 0x2880, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000001300)=""/4096, 0x1000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x400102, 0x0) openat$auto_show_traces_fops_trace(0xffffffffffffff9c, 0x0, 0x826c0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) bpf$auto(0x8000000, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x5, 0x9, 0x3, 0x80, 0x8, 0x4, 0x1, 0x200, 0x8, 0x401, 0x2, 0xe2, 0x4, 0xc28}, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dT\xbab.B^\xe9\xd1J\xc7\xc0\'\xddV\xd4\xee\xc2\xdd\xa7\xd6\xc7\xca\"E\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\a\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4mt\xa7\x88@\x00!\xdc\x9a\x1c\xf5\xec\x03\x1e\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x95\x99K\x00\x00\x00\x00\x00\x00K\fE\a\xca\xd36\xe8\xcb?C\x0f\xdfm\xaa\xa4\x7f$\x1d\xd2\xa1mZ\xdd\x00\'\xeb3\xf3\x83:\x02X\xad^\xe8\f\xf5\xa7\x10\x1b\x94\xfe\xe6\xfb\x12\x94\xd4_\v\xf9\x1a\xdd!\xfb\xe25\xbaN\xf7F\x1f\xf8\xdbu:\x90\xf2\xc6W8\xfa\x85\x19\x188\x8f1\xd1\x9f\x83\vI\xc8\x91?0}\xd06\x87\xc7\xc7', 0x100100a3d4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/nbd13/queue/max_segment_size\x00', 0x282060, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto(r3, 0x540a, 0x0) ioctl$auto_TIOCSTI2(r3, 0x5412, &(0x7f0000000080)) 4.772432364s ago: executing program 0 (id=658): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/fs/netfs/volumes\x00', 0x40080, 0x0) pread64$auto(r4, 0x0, 0x8100000041, 0x413e) clock_nanosleep$auto(0xfffffff2, 0x5, 0x0, 0x0) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0xfffffffffffffffa, 0x9, 0x19) waitid$auto_P_PIDFD(0x3, r1, &(0x7f0000000040)={@siginfo_0_0={0x2, 0x4, 0x0, @_rt={0xffffffffffffffff, 0x0, @sival_ptr=&(0x7f0000000280)="79ca6170c72c9b5affac767c0127e58e38f3f407303ed544651fc514ea2bf3a8d8ec1b5efc99d62cbb8043d4582607afd440f400a4fdcd74a0d6cc759ee437d05a5a149e70f79615cb36ed421aea340b2fe64c6f0439d9294cee642b94067691cdb8738f2363b14d75159d50f1d2041552ec66151a9f701e52dbbc1da461754f08314b0d6bbb04733b1e75896aa1d04e8e80eeef31efb7c1d6d29923d10bb06fc202e8c6970da24c428b428a45a8146761b0799727aa98dee9a474d1ec2011619ef92795e56f01adc6944105d7bf5c917ab81c899a21ee50a5ef56db545f7c67b8077183bc65"}}}, 0x20f5, &(0x7f0000000440)={{0x0, 0x80}, {0x8, 0x3}, 0xc2, 0xfffffffffffffff1, 0x80000001, 0x9, 0x1, 0xffffffffffffffff, 0x101, 0x101, 0xfff, 0x0, 0x3, 0x9, 0x8, 0xfffffffffffffffa}) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) socket(0x1d, 0x3, 0x1) ptrace$auto(0x4206, 0x1, 0x100000000, 0xe855) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r5, r5, 0x0, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x3) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syzkaller1\x00'}) 4.241445392s ago: executing program 2 (id=659): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000040)='/\xc8\xa5\x83\x1c\xe0\x8a\xeb\xce\xfb\xa8\xe3k\xba/>\xa7dev/audio1\x00', 0x100000a3d9) sysfs$auto(0x2, 0x23, 0x0) r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r2, 0x0, 0x4) r3 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, 0x0, 0x2482, 0x0) close_range$auto(0x2, 0x8, 0x0) select$auto(0x79c9, &(0x7f0000000200)={[0x0, 0x8, 0x4, 0x7f, 0x8, 0x7, 0x9, 0x7, 0x10000, 0x0, 0x7, 0x7, 0xdb, 0x8, 0x5ae, 0x6]}, &(0x7f00000003c0)={[0x4, 0x8, 0x8, 0x6, 0x7, 0x5, 0x6e9b, 0x0, 0x0, 0x10, 0x588, 0x1, 0x6f, 0x8, 0x6, 0x80000001]}, &(0x7f0000000440)={[0x4, 0x5ee7, 0x7, 0x80000, 0xffffffffffffff01, 0x1, 0x400, 0xe, 0x2, 0x2, 0x9, 0xbf87, 0x0, 0xfffffffffffffffd, 0x3, 0x81]}, &(0x7f0000000140)={0x401, 0x1}) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) getsockopt$auto_SO_NETNS_COOKIE(r0, 0x7, 0x47, &(0x7f0000000380)='-\xc8\xa5\x83\x1c\xe0\x8a\xeb\xcc\xfb\xa8\xe3k\b/*\xa7dev/audio1\x00q>l. <\xb0', &(0x7f00000001c0)=0x9) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) mmap$auto(0x1000, 0xffffffffffffff00, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0xd364, &(0x7f0000000000)={0x400, 0x10002, 0x7f, 0x7, 0x6, 0x5, r5, [], {0x2, 0x4, 0x6, 0x2, 0x40, 0x4, 0x7, 0x7, 0x80000000}, {0x7, 0x1ff, 0x80000001, 0x8, 0x6b, 0x9, 0x0, 0xfffffffa, 0xb1}}) sendmsg$auto_IPVS_CMD_SET_DEST(r1, &(0x7f0000000a40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000500)={0x3d0, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xd5, 0x1, 0x0, 0x1, [@generic="303c31fa3369ce48eb19a36f293d67232b03c93422d4b13bb910c82f5f3d0f957df74c337e2b5a056d42838bd7643715b4e107f92a3f2cd6ceb9ef0d7a736f876a2230834fcf4733fea2eaab27823d84b9fd740f92044946baed73917984f87be1a4528622fdd54fcab1868c2e", @typed={0x8, 0x80, 0x0, 0x0, @pid}, @generic="382f0949df58942078e6c30d79f107ba42847e9f62bdd48fad56c2dfeade393113e27e99890b317f721b8decbdcd84fac8fdb4255207210927b4b1bc83c9d6acc4c0936a7541a7fbc09d206888ae47a4b1d1b5775768f1cfe64e6717"]}, @IPVS_CMD_ATTR_DEST={0xf8, 0x2, 0x0, 0x1, [@generic="a1c2257f11457f4aaaf1a1208bbbb392453d2fd866551951c58c6aa9afaa32e32adee764c09ac952d5268b6f55e59d493f975dcf2c207107955f135679ec12ca92311de0e0512029387704dcbe3ede1e4559bc25b8989cbad40cd062d4eeb58436fc34fc72fecc7df41faf3d69c8cbc9cf5cce1944a7f6ee24fef022580490b9ca74e58ac9074f259f474c8f1a59370b713da10d000e7c470dafad522530bca862b68a64d691fb23fc5d22a0c41b30e62d7fd3c3169ac53b1a27add13bb4f791106deb6f11755f202c2ce78f3ab8188888a9ee4ecf995ee9c520676f814ffcdc41be79fad923ed7d7127c05c", @typed={0x8, 0x124, 0x0, 0x0, @uid}]}, @IPVS_CMD_ATTR_DEST={0x35, 0x2, 0x0, 0x1, [@generic="50fb692dd6d9cc3d2f401e54b43b2ad76f368444ae067183d8beef8c443f1a4c44d9f9d0ac301db2626a19e028d9d31499"]}, @IPVS_CMD_ATTR_SERVICE={0x1b2, 0x1, 0x0, 0x1, [@typed={0x9, 0x38, 0x0, 0x0, @str=']*}\'\x00'}, @generic="fcc0ca4b9403ed2b7c68fe10c584066388c76cc2cbb0bd010e45c3dcd9a021037e4c1fb35a2aacec3d11b2b2e35e7a58dca9bd6f645e000ff8ae3e28c9ec8e0817cbf5d5a232e5cf1089cf26e56fa5a188db774a311c40f9a377274aeefcd13bef4acdbe856605221d70234ddb1e0d2409807d5c8ef81507e011", @nested={0x14, 0x17, 0x0, 0x1, [@typed={0x8, 0xe7, 0x0, 0x0, @u32=0x7ff}, @typed={0x5, 0xf3, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0x114, 0x0, 0x0, @fd=r5}, @typed={0x8, 0xc1, 0x0, 0x0, @fd=r3}, @nested={0x14, 0xc, 0x0, 0x1, [@nested={0x4, 0xf2}, @typed={0x7, 0x12e, 0x0, 0x0, @str='-&\x00'}, @nested={0x4, 0xcf}]}, @nested={0xcc, 0x8f, 0x0, 0x1, [@typed={0x4, 0x147}, @typed={0x8, 0x9b, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="8a669fc1d50e07d13226ff88baefd81fe0cc72a97bfbb9a4744011135deea3201fc6888b", @typed={0x14, 0x14c, 0x0, 0x0, @ipv6=@local}, @generic="b1b7ea1d16afabb2b85984e6a85e0d0110bd02593a41e3637174eb14475f5669d2a0caf85511d525ac20f6c48ee576453b2d42362b4fda0a2ea2f2526835ecd3ecb265555d0c977f6888b7826324af59eae612a7c356c7aeb4ce0d0e77c0514ff6f16fd6fe2bf8e852ea60d2ae7d0405479b0ee255bb373b7310d7c9d302c543", @generic, @nested={0x4, 0xe4}]}, @typed={0x22, 0xe3, 0x0, 0x0, @str='/sys/power/pm_trace_dev_match\x00'}]}]}, 0x3d0}, 0x1, 0x0, 0x0, 0x10}, 0x20040011) ioctl$auto_PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2082, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000280)=""/175, 0xaf) r6 = socket(0xa, 0x800, 0xa) connect$auto(r6, &(0x7f0000000000)=@generic={0x0, "ff20e100002000"}, 0x58) recvmmsg$auto(0x3, 0x0, 0x3, 0x3, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) shutdown$auto(0x200000003, 0x2) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000180), r1) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x480842, 0x0) 3.922063474s ago: executing program 1 (id=660): r0 = prctl$auto_PR_SCHED_CORE_GET(0x3, 0x0, 0x0, 0x4, 0x3) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x40008c5) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/scsi/sg/allow_dio\x00', 0x101181, 0x0) write$auto(0x3, 0x0, 0x100082) r1 = socket$nl_generic(0x10, 0x3, 0x10) rseq$auto(0x0, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) clone$auto(0x7fff, 0xff, 0x0, 0x0, 0x7) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x800000000007, 0xd3e, 0x1, 0x948b, 0x3, 0xf1f, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) dup2$auto(0x5, 0x4) write$auto(0x6, 0x0, 0x100000001) splice$auto(0x4, 0x0, r2, 0x0, 0x10000, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) r3 = syz_genetlink_get_family_id$auto_smbd_genl(0x0, r1) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x200, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008800}, 0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, 0x0, 0x14) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) r4 = socket(0x2, 0x3, 0xff) setsockopt$auto(r4, 0xff, 0x1, 0x0, 0x7) getpriority$auto_PRIO_USER(0x2, 0x0) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) write$auto(r5, 0x0, 0xfffffdef) 3.143024143s ago: executing program 2 (id=661): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) openat$auto_show_traces_fops_trace(0xffffffffffffff9c, 0x0, 0x826c0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) bpf$auto(0x8000000, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x5, 0x9, 0x3, 0x80, 0x8, 0x4, 0x1, 0x200, 0x8, 0x401, 0x2, 0xe2, 0x4, 0xc28}, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dT\xbab.B^\xe9\xd1J\xc7\xc0\'\xddV\xd4\xee\xc2\xdd\xa7\xd6\xc7\xca\"E\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\a\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4mt\xa7\x88@\x00!\xdc\x9a\x1c\xf5\xec\x03\x1e\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x95\x99K\x00\x00\x00\x00\x00\x00K\fE\a\xca\xd36\xe8\xcb?C\x0f\xdfm\xaa\xa4\x7f$\x1d\xd2\xa1mZ\xdd\x00\'\xeb3\xf3\x83:\x02X\xad^\xe8\f\xf5\xa7\x10\x1b\x94\xfe\xe6\xfb\x12\x94\xd4_\v\xf9\x1a\xdd!\xfb\xe25\xbaN\xf7F\x1f\xf8\xdbu:\x90\xf2\xc6W8\xfa\x85\x19\x188\x8f1\xd1\x9f\x83\vI\xc8\x91?0}\xd06\x87\xc7\xc7', 0x100100a3d4) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r1, 0x0, 0x24000000) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r2, 0x0, 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r3 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x3, 0x3b) socket(0xa, 0x3, 0x3b) pidfd_send_signal$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffb1e0, 0x4, &(0x7f0000000240)={@siginfo_0_0={0xffffd034, 0x4, 0xfffffffe, @_timer={r3, 0x0, @sival_int=0xa3, 0xd5ba}}}, 0x1) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) socketpair$auto(0x1, 0x5, 0x2a340, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x1ff, 0x3, 0x1, 0x7, 0xfffffffffffffffb, 0x15f4da05, 0x10, 0x1000, 0x3, 0x4000008000001f, 0x6, 0x6d3e, 0x8cfb7, 0x9, 0x6]}, 0x0) wait4$auto(r3, 0x0, 0x80000001, 0x0) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/hugetlb.1GB.limit_in_bytes\x00', 0x10b142, 0x0) sendfile$auto(r5, r6, 0x0, 0x1000200) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x12, 0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1000000006, 0x7, 0x8, 0x5, 0x1000, 0x42, 0x8001, 0x1, 0x60, 0x40000102}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 2.750860663s ago: executing program 0 (id=662): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) bpf$auto(0x8000000, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x5, 0x9, 0x3, 0x80, 0x8, 0x4, 0x1, 0x200, 0x8, 0x401, 0x2, 0xe2, 0x4, 0xc28}, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x106) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/rxrpc/calls\x00', 0x40280, 0x0) r1 = socket(0x1d, 0x2, 0x6) bind$auto(r1, 0x0, 0x13) socket(0xa, 0x3, 0x100) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x7, 0x637b, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kmsg\x00', 0x80900, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/rt_cache\x00', 0x2000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0x1800000, 0x1, 0x948b, 0x4875, 0x800295f4da0a, 0x400, 0x40000000000003, 0x462, 0x80000001, 0x50a7, 0x6d3f, 0x5, 0x1, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7f, 0xd, 0x1, 0x948f, 0x1005, 0x20a, 0x6, 0xfffffffffffffff6, 0x7, 0x9, 0x79c, 0x6, 0x100000000000000, 0xfffffffffffffffe, 0x400000000000f]}, 0x0) madvise$auto(0x0, 0x200007, 0x19) syz_clone(0x1002000, 0x0, 0x0, 0x0, 0x0, 0x0) futex_wake$auto(0x0, 0x5, 0x4, 0xa) mmap$auto(0xb, 0x2020003, 0x7, 0x100009000000ebe, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) creat$auto(0x0, 0x3ff) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/conf/wlan1/send_redirects\x00', 0x202, 0x0) 2.569246669s ago: executing program 1 (id=663): waitid$auto(0x8, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)={{0xfffffffffffffff9, 0x80}, {0x2, 0x6}, 0x4, 0x5, 0x1, 0x3, 0x0, 0x8000, 0x80000000, 0x7, 0xb7, 0x5d9, 0x5, 0x7ff, 0x2055}) mmap$auto(0x2, 0x400008, 0xdf, 0x9b72, 0x2, 0x10000000008000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0xa, 0x5, 0x0) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) pread64$auto(0xffffffffffffffff, 0x0, 0x200000000003, 0x2f4a3a23) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/003/001\x00', 0x42082, 0x0) ioctl$auto_USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000000)=0xffffffff) mprotect$auto(0x110c230000, 0xa588, 0x6) mremap$auto(0x110c231000, 0x0, 0x101, 0x3, 0x0) move_pages$auto(0x0, 0x9, 0x0, 0x0, 0x0, 0x2) writev$auto(r0, &(0x7f0000000300)={&(0x7f0000000200), 0x200}, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x2c402, 0x0) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ttye9\x00', 0x102, 0x0) sendfile$auto(r3, r2, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x8000) semctl$auto_GETNCNT(0x0, 0x4, 0xe, 0x4) bpf$auto(0x12, 0x0, 0x26) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) fstat$auto(r4, 0x0) 1.674919761s ago: executing program 3 (id=664): pwrite64$auto(0xffffffffffffffff, &(0x7f0000000100)='B\x00\x00\x00\x00\x00\x00\x001\x00', 0xe, 0x7) r0 = semctl$auto(0x1, 0x7, 0x2, 0xffffffffffffff7e) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000800)={0x4c, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@OVS_DP_ATTR_IFINDEX={0x8, 0x9, r2}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, r0}, @OVS_DP_ATTR_IFINDEX={0x8, 0x9, r3}, @OVS_DP_ATTR_USER_FEATURES={0x8}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x1}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, r0}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r4) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x4d}) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000340), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f000001f300), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES32=r6], 0x1ac}}, 0x40000) ioctl$auto_PPPIOCSPASS(r5, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x30, 0xff, 0x0, @raw=0xfffff030}}) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0x400053, 0x9) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r7, 0x0) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r8) ioctl$auto_KVM_CREATE_VM(r7, 0x4040aea0, 0xb00) 1.640556887s ago: executing program 0 (id=666): r0 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r0, 0x0, 0x17) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) mincore$auto(0x1000, 0x8001, 0x0) socket(0x18, 0x80004, 0x1) socket(0x2, 0x3, 0xa) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0) write$auto(r1, &(0x7f0000000140)='0[.[\x00', 0xcd04) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/lru_gen/enabled\x00', 0xb02, 0x0) sendfile$auto(r2, r2, 0x0, 0x1) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x1000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r3, 0x80) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000100)={0x3}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x1008000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x100) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) setsockopt$auto(0x400000000000003, 0x29, 0x1c, 0x0, 0x56b) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.140639845s ago: executing program 1 (id=667): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000040)='/\xc8\xa5\x83\x1c\xe0\x8a\xeb\xce\xfb\xa8\xe3k\xba/>\xa7dev/audio1\x00', 0x100000a3d9) sysfs$auto(0x2, 0x23, 0x0) r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r2, 0x0, 0x4) r3 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, 0x0, 0x2482, 0x0) close_range$auto(0x2, 0x8, 0x0) select$auto(0x79c9, &(0x7f0000000200)={[0x0, 0x8, 0x4, 0x7f, 0x8, 0x7, 0x9, 0x7, 0x10000, 0x0, 0x7, 0x7, 0xdb, 0x8, 0x5ae, 0x6]}, &(0x7f00000003c0)={[0x4, 0x8, 0x8, 0x6, 0x7, 0x5, 0x6e9b, 0x0, 0x0, 0x10, 0x588, 0x1, 0x6f, 0x8, 0x6, 0x80000001]}, &(0x7f0000000440)={[0x4, 0x5ee7, 0x7, 0x80000, 0xffffffffffffff01, 0x1, 0x400, 0xe, 0x2, 0x2, 0x9, 0xbf87, 0x0, 0xfffffffffffffffd, 0x3, 0x81]}, &(0x7f0000000140)={0x401, 0x1}) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) getsockopt$auto_SO_NETNS_COOKIE(r0, 0x7, 0x47, &(0x7f0000000380)='-\xc8\xa5\x83\x1c\xe0\x8a\xeb\xcc\xfb\xa8\xe3k\b/*\xa7dev/audio1\x00q>l. <\xb0', &(0x7f00000001c0)=0x9) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) mmap$auto(0x1000, 0xffffffffffffff00, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0xd364, &(0x7f0000000000)={0x400, 0x10002, 0x7f, 0x7, 0x6, 0x5, r5, [], {0x2, 0x4, 0x6, 0x2, 0x40, 0x4, 0x7, 0x7, 0x80000000}, {0x7, 0x1ff, 0x80000001, 0x8, 0x6b, 0x9, 0x0, 0xfffffffa, 0xb1}}) sendmsg$auto_IPVS_CMD_SET_DEST(r1, &(0x7f0000000a40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000500)={0x308, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xd5, 0x1, 0x0, 0x1, [@generic="303c31fa3369ce48eb19a36f293d67232b03c93422d4b13bb910c82f5f3d0f957df74c337e2b5a056d42838bd7643715b4e107f92a3f2cd6ceb9ef0d7a736f876a2230834fcf4733fea2eaab27823d84b9fd740f92044946baed73917984f87be1a4528622fdd54fcab1868c2e", @typed={0x8, 0x80, 0x0, 0x0, @pid}, @generic="382f0949df58942078e6c30d79f107ba42847e9f62bdd48fad56c2dfeade393113e27e99890b317f721b8decbdcd84fac8fdb4255207210927b4b1bc83c9d6acc4c0936a7541a7fbc09d206888ae47a4b1d1b5775768f1cfe64e6717"]}, @IPVS_CMD_ATTR_DEST={0xf8, 0x2, 0x0, 0x1, [@generic="a1c2257f11457f4aaaf1a1208bbbb392453d2fd866551951c58c6aa9afaa32e32adee764c09ac952d5268b6f55e59d493f975dcf2c207107955f135679ec12ca92311de0e0512029387704dcbe3ede1e4559bc25b8989cbad40cd062d4eeb58436fc34fc72fecc7df41faf3d69c8cbc9cf5cce1944a7f6ee24fef022580490b9ca74e58ac9074f259f474c8f1a59370b713da10d000e7c470dafad522530bca862b68a64d691fb23fc5d22a0c41b30e62d7fd3c3169ac53b1a27add13bb4f791106deb6f11755f202c2ce78f3ab8188888a9ee4ecf995ee9c520676f814ffcdc41be79fad923ed7d7127c05c", @typed={0x8, 0x124, 0x0, 0x0, @uid}]}, @IPVS_CMD_ATTR_DEST={0x35, 0x2, 0x0, 0x1, [@generic="50fb692dd6d9cc3d2f401e54b43b2ad76f368444ae067183d8beef8c443f1a4c44d9f9d0ac301db2626a19e028d9d31499"]}, @IPVS_CMD_ATTR_SERVICE={0xea, 0x1, 0x0, 0x1, [@typed={0x9, 0x38, 0x0, 0x0, @str=']*}\'\x00'}, @generic="fcc0ca4b9403ed2b7c68fe10c584066388c76cc2cbb0bd010e45c3dcd9a021037e4c1fb35a2aacec3d11b2b2e35e7a58dca9bd6f645e000ff8ae3e28c9ec8e0817cbf5d5a232e5cf1089cf26e56fa5a188db774a311c40f9a377274aeefcd13bef4acdbe856605221d70234ddb1e0d2409807d5c8ef81507e011", @nested={0x14, 0x17, 0x0, 0x1, [@typed={0x8, 0xe7, 0x0, 0x0, @u32=0x7ff}, @typed={0x5, 0xf3, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0x114, 0x0, 0x0, @fd=r5}, @typed={0x8, 0xc1, 0x0, 0x0, @fd=r3}, @nested={0x14, 0xc, 0x0, 0x1, [@nested={0x4, 0xf2}, @typed={0x7, 0x12e, 0x0, 0x0, @str='-&\x00'}, @nested={0x4, 0xcf}]}, @nested={0x4, 0x8f}, @typed={0x22, 0xe3, 0x0, 0x0, @str='/sys/power/pm_trace_dev_match\x00'}]}]}, 0x308}, 0x1, 0x0, 0x0, 0x10}, 0x20040011) ioctl$auto_PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2082, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000280)=""/175, 0xaf) r6 = socket(0xa, 0x800, 0xa) connect$auto(r6, &(0x7f0000000000)=@generic={0x0, "ff20e100002000"}, 0x58) recvmmsg$auto(0x3, 0x0, 0x3, 0x3, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) shutdown$auto(0x200000003, 0x2) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000180), r1) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x480842, 0x0) 906.551984ms ago: executing program 2 (id=668): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) madvise$auto(0x108000, 0x800032, 0x4) r0 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = socket$nl_generic(0x10, 0x3, 0x10) poll$auto(0x0, 0x7, 0x3) r2 = syz_genetlink_get_family_id$auto_netdev(0x0, r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'team_slave_0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000003980)={&(0x7f0000000500)={0x1c, r2, 0x301, 0x70bd2e, 0x25dfdbfd, {}, [@NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NETDEV_A_DEV_IFINDEX={0x8}, @NETDEV_A_DEV_IFINDEX={0x8, 0x1, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000008}, 0xc0000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r5, &(0x7f0000001a00)="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", 0x892) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x9}, 0x3, 0x0) unshare$auto(0x40000080) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) rt_sigsuspend$auto(&(0x7f00000000c0)={0x4}, 0x8) select$auto(0x5, 0x0, &(0x7f0000000140)={[0x9, 0x8, 0x3, 0x10, 0x3, 0x9, 0x9, 0xff, 0x3, 0x2, 0x2, 0x7, 0x100000001, 0x8000000000000001, 0x4, 0x9]}, 0x0, 0x0) mmap$auto(0x0, 0x2000a, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, 0x0, 0x109000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/11/smp_affinity_list\x00', 0x129542, 0x0) read$auto(0x3, 0x0, 0xf34) 510.961097ms ago: executing program 1 (id=669): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000040)='/\xc8\xa5\x83\x1c\xe0\x8a\xeb\xce\xfb\xa8\xe3k\xba/>\xa7dev/audio1\x00', 0x100000a3d9) sysfs$auto(0x2, 0x23, 0x0) r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r2, 0x0, 0x4) r3 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, 0x0, 0x2482, 0x0) close_range$auto(0x2, 0x8, 0x0) select$auto(0x79c9, &(0x7f0000000200)={[0x0, 0x8, 0x4, 0x7f, 0x8, 0x7, 0x9, 0x7, 0x10000, 0x0, 0x7, 0x7, 0xdb, 0x8, 0x5ae, 0x6]}, &(0x7f00000003c0)={[0x4, 0x8, 0x8, 0x6, 0x7, 0x5, 0x6e9b, 0x0, 0x0, 0x10, 0x588, 0x1, 0x6f, 0x8, 0x6, 0x80000001]}, &(0x7f0000000440)={[0x4, 0x5ee7, 0x7, 0x80000, 0xffffffffffffff01, 0x1, 0x400, 0xe, 0x2, 0x2, 0x9, 0xbf87, 0x0, 0xfffffffffffffffd, 0x3, 0x81]}, &(0x7f0000000140)={0x401, 0x1}) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) getsockopt$auto_SO_NETNS_COOKIE(r0, 0x7, 0x47, &(0x7f0000000380)='-\xc8\xa5\x83\x1c\xe0\x8a\xeb\xcc\xfb\xa8\xe3k\b/*\xa7dev/audio1\x00q>l. <\xb0', &(0x7f00000001c0)=0x9) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) mmap$auto(0x1000, 0xffffffffffffff00, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0xd364, &(0x7f0000000000)={0x400, 0x10002, 0x7f, 0x7, 0x6, 0x5, r5, [], {0x2, 0x4, 0x6, 0x2, 0x40, 0x4, 0x7, 0x7, 0x80000000}, {0x7, 0x1ff, 0x80000001, 0x8, 0x6b, 0x9, 0x0, 0xfffffffa, 0xb1}}) sendmsg$auto_IPVS_CMD_SET_DEST(r1, &(0x7f0000000a40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000500)={0x3d0, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xd5, 0x1, 0x0, 0x1, [@generic="303c31fa3369ce48eb19a36f293d67232b03c93422d4b13bb910c82f5f3d0f957df74c337e2b5a056d42838bd7643715b4e107f92a3f2cd6ceb9ef0d7a736f876a2230834fcf4733fea2eaab27823d84b9fd740f92044946baed73917984f87be1a4528622fdd54fcab1868c2e", @typed={0x8, 0x80, 0x0, 0x0, @pid}, @generic="382f0949df58942078e6c30d79f107ba42847e9f62bdd48fad56c2dfeade393113e27e99890b317f721b8decbdcd84fac8fdb4255207210927b4b1bc83c9d6acc4c0936a7541a7fbc09d206888ae47a4b1d1b5775768f1cfe64e6717"]}, @IPVS_CMD_ATTR_DEST={0xf8, 0x2, 0x0, 0x1, [@generic="a1c2257f11457f4aaaf1a1208bbbb392453d2fd866551951c58c6aa9afaa32e32adee764c09ac952d5268b6f55e59d493f975dcf2c207107955f135679ec12ca92311de0e0512029387704dcbe3ede1e4559bc25b8989cbad40cd062d4eeb58436fc34fc72fecc7df41faf3d69c8cbc9cf5cce1944a7f6ee24fef022580490b9ca74e58ac9074f259f474c8f1a59370b713da10d000e7c470dafad522530bca862b68a64d691fb23fc5d22a0c41b30e62d7fd3c3169ac53b1a27add13bb4f791106deb6f11755f202c2ce78f3ab8188888a9ee4ecf995ee9c520676f814ffcdc41be79fad923ed7d7127c05c", @typed={0x8, 0x124, 0x0, 0x0, @uid}]}, @IPVS_CMD_ATTR_DEST={0x35, 0x2, 0x0, 0x1, [@generic="50fb692dd6d9cc3d2f401e54b43b2ad76f368444ae067183d8beef8c443f1a4c44d9f9d0ac301db2626a19e028d9d31499"]}, @IPVS_CMD_ATTR_SERVICE={0x1b2, 0x1, 0x0, 0x1, [@typed={0x9, 0x38, 0x0, 0x0, @str=']*}\'\x00'}, @generic="fcc0ca4b9403ed2b7c68fe10c584066388c76cc2cbb0bd010e45c3dcd9a021037e4c1fb35a2aacec3d11b2b2e35e7a58dca9bd6f645e000ff8ae3e28c9ec8e0817cbf5d5a232e5cf1089cf26e56fa5a188db774a311c40f9a377274aeefcd13bef4acdbe856605221d70234ddb1e0d2409807d5c8ef81507e011", @nested={0x14, 0x17, 0x0, 0x1, [@typed={0x8, 0xe7, 0x0, 0x0, @u32=0x7ff}, @typed={0x5, 0xf3, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0x114, 0x0, 0x0, @fd=r5}, @typed={0x8, 0xc1, 0x0, 0x0, @fd=r3}, @nested={0x14, 0xc, 0x0, 0x1, [@nested={0x4, 0xf2}, @typed={0x7, 0x12e, 0x0, 0x0, @str='-&\x00'}, @nested={0x4, 0xcf}]}, @nested={0xcc, 0x8f, 0x0, 0x1, [@typed={0x4, 0x147}, @typed={0x8, 0x9b, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="8a669fc1d50e07d13226ff88baefd81fe0cc72a97bfbb9a4744011135deea3201fc6888b", @typed={0x14, 0x14c, 0x0, 0x0, @ipv6=@local}, @generic="b1b7ea1d16afabb2b85984e6a85e0d0110bd02593a41e3637174eb14475f5669d2a0caf85511d525ac20f6c48ee576453b2d42362b4fda0a2ea2f2526835ecd3ecb265555d0c977f6888b7826324af59eae612a7c356c7aeb4ce0d0e77c0514ff6f16fd6fe2bf8e852ea60d2ae7d0405479b0ee255bb373b7310d7c9d302c543", @generic, @nested={0x4, 0xe4}]}, @typed={0x22, 0xe3, 0x0, 0x0, @str='/sys/power/pm_trace_dev_match\x00'}]}]}, 0x3d0}, 0x1, 0x0, 0x0, 0x10}, 0x20040011) ioctl$auto_PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2082, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000280)=""/175, 0xaf) r6 = socket(0xa, 0x800, 0xa) connect$auto(r6, &(0x7f0000000000)=@generic={0x0, "ff20e100002000"}, 0x58) recvmmsg$auto(0x3, 0x0, 0x3, 0x3, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) shutdown$auto(0x200000003, 0x2) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000180), r1) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x480842, 0x0) 0s ago: executing program 0 (id=670): timer_create$auto(0x7, 0x0, &(0x7f0000000140)=0x6) timer_settime$auto(0x0, 0xffff8000, &(0x7f00000000c0)={{0xf, 0x10007}, {0x0, 0x800}}, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) fcntl$auto(0x3, 0x4, 0xa553) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), r1) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000080)={0x2c, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r2, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioperm$auto(0x7, 0x6, 0x2) syz_clone3(&(0x7f00000000c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1adf82, 0x0) ioctl$auto(0x3, 0x80286f4e, r6) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) ioctl$auto(0x3, 0x4038ae7a, r0) kernel console output (not intermixed with test programs): x1b0 [ 221.308038][ T7459] __x64_sys_chmod+0x5e/0x80 [ 221.308073][ T7459] do_syscall_64+0x106/0xf80 [ 221.308119][ T7459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.583504][ T7476] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 223.612708][ T7476] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 223.631430][ T7476] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 223.698405][ T7476] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 223.795942][ T7484] Process accounting paused [ 223.967630][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 225.385103][ T7523] page: refcount:22 mapcount:0 mapping:0000000000000000 index:0xffff888078006000 pfn:0x78000 [ 225.553824][ T7523] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 225.647671][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 225.653944][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 225.707735][ T7523] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 225.727645][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 225.795006][ T7523] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 225.857900][ T7523] raw: ffff888078006000 0000000000000000 00000016ffffffff 0000000000000000 [ 225.959280][ T7523] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 226.047625][ T7523] head: ffff888078006000 0000000000000000 00000016ffffffff 0000000000000000 [ 226.107395][ T7523] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 226.180393][ T7523] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 226.347643][ T7523] page dumped because: unmovable page [ 226.354805][ T7523] page_owner tracks the page as allocated [ 226.437583][ T7523] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 5487, tgid 5487 (dhcpcd), ts 64294205889, free_ts 61451342519 [ 226.550192][ T7523] post_alloc_hook+0x1e1/0x250 [ 226.555235][ T7523] get_page_from_freelist+0x111d/0x3140 [ 226.563185][ T7523] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 226.569741][ T7523] alloc_pages_mpol+0x1fb/0x550 [ 226.578083][ T7523] alloc_pages_noprof+0x131/0x390 [ 226.583664][ T7523] skb_page_frag_refill+0x365/0x5b0 [ 226.590945][ T7523] try_fill_recv+0x7f1/0x2950 [ 226.595883][ T7523] virtnet_open+0x5f2/0x960 [ 226.601691][ T7523] __dev_open+0x3ad/0x960 [ 226.606541][ T7523] __dev_change_flags+0x558/0x6f0 [ 226.612386][ T7523] netif_change_flags+0x8d/0x160 [ 226.618717][ T7523] dev_change_flags+0xba/0x250 [ 226.660667][ T7523] devinet_ioctl+0x110b/0x1f10 [ 226.665631][ T7523] inet_ioctl+0x3aa/0x3f0 [ 226.677750][ T7523] sock_do_ioctl+0x118/0x280 [ 226.682713][ T7523] sock_ioctl+0x599/0x6b0 [ 226.689838][ T7523] page last free pid 5489 tgid 5489 stack trace: [ 226.696455][ T7523] __free_frozen_pages+0x822/0x1130 [ 226.717618][ T7523] __put_partials+0x127/0x160 [ 226.778051][ T7523] qlist_free_all+0x47/0xe0 [ 226.783061][ T7523] kasan_quarantine_reduce+0x1a0/0x1f0 [ 226.789328][ T7523] __kasan_slab_alloc+0x69/0x90 [ 226.794483][ T7523] __kmalloc_cache_noprof+0x2e1/0x810 [ 226.800291][ T7523] tomoyo_init_log+0x1a0/0x20c0 [ 226.807718][ T7523] tomoyo_supervisor+0x506/0x1340 [ 226.812835][ T7523] tomoyo_path_number_perm+0x445/0x580 [ 226.822965][ T7523] security_path_chmod+0x121/0x2c0 [ 226.896917][ T7523] chmod_common+0x19a/0x4d0 [ 226.937714][ T7523] do_fchmodat+0x10a/0x1b0 [ 226.942285][ T7523] __x64_sys_chmod+0x5e/0x80 [ 226.947349][ T7523] do_syscall_64+0x106/0xf80 [ 227.047242][ T7523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.721476][ T7541] page: refcount:22 mapcount:0 mapping:0000000000000000 index:0xffff888078006000 pfn:0x78000 [ 227.796272][ T7541] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 227.958349][ T7541] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 227.998143][ T7541] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 228.077651][ T7541] raw: ffff888078006000 0000000000000000 00000016ffffffff 0000000000000000 [ 228.266490][ T7541] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 228.377640][ T7541] head: ffff888078006000 0000000000000000 00000016ffffffff 0000000000000000 [ 228.451136][ T7541] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 228.506148][ T7541] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 228.547551][ T7541] page dumped because: unmovable page [ 228.565001][ T7541] page_owner tracks the page as allocated [ 228.587828][ T7541] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 5487, tgid 5487 (dhcpcd), ts 64294205889, free_ts 61451342519 [ 228.667344][ T7541] post_alloc_hook+0x1e1/0x250 [ 228.737628][ T7541] get_page_from_freelist+0x111d/0x3140 [ 228.743983][ T7541] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 228.771061][ T7541] alloc_pages_mpol+0x1fb/0x550 [ 228.807538][ T7541] alloc_pages_noprof+0x131/0x390 [ 228.836672][ T7541] skb_page_frag_refill+0x365/0x5b0 [ 228.884996][ T7541] try_fill_recv+0x7f1/0x2950 [ 229.014820][ T7541] virtnet_open+0x5f2/0x960 [ 229.020547][ T7541] __dev_open+0x3ad/0x960 [ 229.025137][ T7541] __dev_change_flags+0x558/0x6f0 [ 229.031075][ T7541] netif_change_flags+0x8d/0x160 [ 229.036373][ T7541] dev_change_flags+0xba/0x250 [ 229.050016][ T7541] devinet_ioctl+0x110b/0x1f10 [ 229.127601][ T7541] inet_ioctl+0x3aa/0x3f0 [ 229.132376][ T7541] sock_do_ioctl+0x118/0x280 [ 229.137158][ T7541] sock_ioctl+0x599/0x6b0 [ 229.157921][ T7541] page last free pid 5489 tgid 5489 stack trace: [ 229.168293][ T7541] __free_frozen_pages+0x822/0x1130 [ 229.173879][ T7541] __put_partials+0x127/0x160 [ 229.198157][ T7541] qlist_free_all+0x47/0xe0 [ 229.227707][ T7541] kasan_quarantine_reduce+0x1a0/0x1f0 [ 229.233543][ T7541] __kasan_slab_alloc+0x69/0x90 [ 229.254091][ T7541] __kmalloc_cache_noprof+0x2e1/0x810 [ 229.264234][ T7541] tomoyo_init_log+0x1a0/0x20c0 [ 229.287657][ T7541] tomoyo_supervisor+0x506/0x1340 [ 229.313529][ T7541] tomoyo_path_number_perm+0x445/0x580 [ 229.328440][ T7541] security_path_chmod+0x121/0x2c0 [ 229.338593][ T7541] chmod_common+0x19a/0x4d0 [ 229.343205][ T7541] do_fchmodat+0x10a/0x1b0 [ 229.358249][ T7541] __x64_sys_chmod+0x5e/0x80 [ 229.377912][ T7541] do_syscall_64+0x106/0xf80 [ 229.417812][ T7541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.827632][ T7561] FAULT_INJECTION: forcing a failure. [ 229.827632][ T7561] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 229.859671][ T7561] CPU: 0 UID: 0 PID: 7561 Comm: syz.3.302 Tainted: G L syzkaller #0 PREEMPT(full) [ 229.859720][ T7561] Tainted: [L]=SOFTLOCKUP [ 229.859731][ T7561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 229.859750][ T7561] Call Trace: [ 229.859760][ T7561] [ 229.859772][ T7561] dump_stack_lvl+0x100/0x190 [ 229.859820][ T7561] should_fail_ex.cold+0x5/0xa [ 229.859855][ T7561] _copy_from_iter+0x1f4/0x1690 [ 229.859902][ T7561] ? __alloc_skb+0x220/0x410 [ 229.859930][ T7561] ? __alloc_skb+0x35d/0x410 [ 229.859958][ T7561] ? __pfx__copy_from_iter+0x10/0x10 [ 229.859990][ T7561] ? netlink_autobind.isra.0+0x90/0x370 [ 229.860042][ T7561] netlink_sendmsg+0x808/0xda0 [ 229.860087][ T7561] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.860129][ T7561] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 229.860177][ T7561] __sys_sendto+0x4aa/0x520 [ 229.860209][ T7561] ? __pfx___sys_sendto+0x10/0x10 [ 229.860258][ T7561] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 229.860293][ T7561] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 229.860358][ T7561] __x64_sys_sendto+0xe0/0x1c0 [ 229.860389][ T7561] ? do_syscall_64+0x95/0xf80 [ 229.860433][ T7561] ? lockdep_hardirqs_on+0x78/0x100 [ 229.860478][ T7561] do_syscall_64+0x106/0xf80 [ 229.860520][ T7561] ? clear_bhb_loop+0x40/0x90 [ 229.860558][ T7561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.860590][ T7561] RIP: 0033:0x7f62f775c84e [ 229.860615][ T7561] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 229.860642][ T7561] RSP: 002b:00007f62f85ace88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 229.860671][ T7561] RAX: ffffffffffffffda RBX: 00007f62f85ae6c0 RCX: 00007f62f775c84e [ 229.860689][ T7561] RDX: 000000000000001c RSI: 00007f62f85ad000 RDI: 0000000000000005 [ 229.860706][ T7561] RBP: 0000000000000000 R08: 00007f62f85acf04 R09: 000000000000000c [ 229.860722][ T7561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 229.860738][ T7561] R13: 00007f62f85acf58 R14: 00007f62f85ad000 R15: 0000000000000000 [ 229.860778][ T7561] [ 230.156735][ T7555] Process accounting paused [ 230.376841][ T7566] page: refcount:22 mapcount:0 mapping:0000000000000000 index:0xffff888078006000 pfn:0x78000 [ 230.404366][ T7566] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 230.557028][ T7566] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 230.622401][ T7566] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 230.680764][ T7566] raw: ffff888078006000 0000000000000000 00000016ffffffff 0000000000000000 [ 230.739308][ T7566] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 230.812376][ T7566] head: ffff888078006000 0000000000000000 00000016ffffffff 0000000000000000 [ 230.837665][ T7566] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 230.846994][ T7566] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 230.891189][ T7566] page dumped because: unmovable page [ 230.896711][ T7566] page_owner tracks the page as allocated [ 230.957770][ T7566] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 5487, tgid 5487 (dhcpcd), ts 64294205889, free_ts 61451342519 [ 231.102914][ T7566] post_alloc_hook+0x1e1/0x250 [ 231.132168][ T7566] get_page_from_freelist+0x111d/0x3140 [ 231.160152][ T7566] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 231.189159][ T7567] FAULT_INJECTION: forcing a failure. [ 231.189159][ T7567] name failslab, interval 1, probability 0, space 0, times 0 [ 231.202474][ T7566] alloc_pages_mpol+0x1fb/0x550 [ 231.207460][ T7566] alloc_pages_noprof+0x131/0x390 [ 231.215612][ T7566] skb_page_frag_refill+0x365/0x5b0 [ 231.230091][ T7566] try_fill_recv+0x7f1/0x2950 [ 231.237827][ T7566] virtnet_open+0x5f2/0x960 [ 231.257616][ T7566] __dev_open+0x3ad/0x960 [ 231.257682][ T7567] CPU: 1 UID: 0 PID: 7567 Comm: syz.0.304 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.257721][ T7567] Tainted: [L]=SOFTLOCKUP [ 231.257730][ T7567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 231.257746][ T7567] Call Trace: [ 231.257756][ T7567] [ 231.257766][ T7567] dump_stack_lvl+0x100/0x190 [ 231.257807][ T7567] should_fail_ex.cold+0x5/0xa [ 231.257837][ T7567] should_failslab+0xc2/0x120 [ 231.257868][ T7567] ? constrain_params_by_rules+0x175/0xcc0 [ 231.257894][ T7567] __kmalloc_noprof+0xf6/0x9c0 [ 231.257931][ T7567] ? __kernel_text_address+0xd/0x30 [ 231.257967][ T7567] ? look_up_lock_class+0x55/0x120 [ 231.258012][ T7567] ? constrain_params_by_rules+0x175/0xcc0 [ 231.258038][ T7567] constrain_params_by_rules+0x175/0xcc0 [ 231.258070][ T7567] ? __lock_acquire+0x4a5/0x2630 [ 231.258097][ T7567] ? __pfx_stack_trace_save+0x10/0x10 [ 231.258133][ T7567] ? stack_depot_save_flags+0x27/0x9d0 [ 231.258163][ T7567] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 231.258195][ T7567] ? lock_acquire+0x17c/0x330 [ 231.258223][ T7567] ? __pfx___might_resched+0x10/0x10 [ 231.258260][ T7567] ? register_lock_class+0x40/0x560 [ 231.258284][ T7567] ? __mutex_lock+0x26a/0x1b90 [ 231.258323][ T7567] ? snd_interval_refine+0x2d0/0x580 [ 231.258359][ T7567] snd_pcm_hw_refine+0x7e7/0xad0 [ 231.258392][ T7567] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 231.258427][ T7567] ? do_raw_spin_lock+0x128/0x260 [ 231.258464][ T7567] ? mark_held_locks+0x40/0x70 [ 231.258495][ T7567] snd_pcm_hw_params+0x3f1/0x1cb0 [ 231.258524][ T7567] ? snd_pcm_hw_param_near.constprop.0+0x573/0x850 [ 231.258568][ T7567] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 231.258595][ T7567] ? snd_pcm_hw_param_near.constprop.0+0x573/0x850 [ 231.258642][ T7567] ? snd_pcm_hw_param_near.constprop.0+0x578/0x850 [ 231.258686][ T7567] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 231.258732][ T7567] snd_pcm_kernel_ioctl+0x167/0x2e0 [ 231.258763][ T7567] snd_pcm_oss_change_params_locked+0x1973/0x39f0 [ 231.258821][ T7567] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 231.258865][ T7567] ? __pfx___mutex_lock+0x10/0x10 [ 231.258927][ T7567] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 231.258968][ T7567] snd_pcm_oss_sync+0x265/0x840 [ 231.259014][ T7567] snd_pcm_oss_release+0x238/0x300 [ 231.259052][ T7567] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 231.259091][ T7567] __fput+0x3ff/0xb40 [ 231.259131][ T7567] task_work_run+0x150/0x240 [ 231.259163][ T7567] ? __pfx_task_work_run+0x10/0x10 [ 231.259203][ T7567] exit_to_user_mode_loop+0x100/0x4a0 [ 231.259229][ T7567] ? rcu_is_watching+0x12/0xc0 [ 231.259264][ T7567] do_syscall_64+0x668/0xf80 [ 231.259299][ T7567] ? clear_bhb_loop+0x40/0x90 [ 231.259331][ T7567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.259356][ T7567] RIP: 0033:0x7f76df59bf79 [ 231.259378][ T7567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.259403][ T7567] RSP: 002b:00007f76dd7ee028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 231.259429][ T7567] RAX: 0000000000000000 RBX: 00007f76df815fa0 RCX: 00007f76df59bf79 [ 231.259446][ T7567] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 231.259461][ T7567] RBP: 00007f76df6327e0 R08: 0000000000000000 R09: 0000000000000000 [ 231.259476][ T7567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.259491][ T7567] R13: 00007f76df816038 R14: 00007f76df815fa0 R15: 00007ffc90dbc8a8 [ 231.259528][ T7567] [ 231.493147][ T7567] binder: 7564:7567 ioctl c018620c 0 returned -1 [ 231.544570][ T7566] __dev_change_flags+0x558/0x6f0 [ 231.648056][ T7566] netif_change_flags+0x8d/0x160 [ 231.657641][ T7566] dev_change_flags+0xba/0x250 [ 231.662588][ T7566] devinet_ioctl+0x110b/0x1f10 [ 231.695456][ T7566] inet_ioctl+0x3aa/0x3f0 [ 231.707715][ T7566] sock_do_ioctl+0x118/0x280 [ 231.712579][ T7566] sock_ioctl+0x599/0x6b0 [ 231.716978][ T7566] page last free pid 5489 tgid 5489 stack trace: [ 231.739986][ T7566] __free_frozen_pages+0x822/0x1130 [ 231.745462][ T7566] __put_partials+0x127/0x160 [ 231.765542][ T7566] qlist_free_all+0x47/0xe0 [ 231.791135][ T7566] kasan_quarantine_reduce+0x1a0/0x1f0 [ 231.809544][ T7566] __kasan_slab_alloc+0x69/0x90 [ 231.818068][ T7566] __kmalloc_cache_noprof+0x2e1/0x810 [ 231.823890][ T7566] tomoyo_init_log+0x1a0/0x20c0 [ 231.857546][ T7566] tomoyo_supervisor+0x506/0x1340 [ 231.862990][ T7566] tomoyo_path_number_perm+0x445/0x580 [ 231.878056][ T7566] security_path_chmod+0x121/0x2c0 [ 231.907854][ T7566] chmod_common+0x19a/0x4d0 [ 231.927816][ T7566] do_fchmodat+0x10a/0x1b0 [ 231.932546][ T7566] __x64_sys_chmod+0x5e/0x80 [ 231.937392][ T7566] do_syscall_64+0x106/0xf80 [ 231.947682][ T7566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.028163][ T7579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.306'. [ 232.305866][ T7584] ptp ptp0: new virtual clock ptp1 [ 232.322177][ T7584] ptp ptp0: guarantee physical clock free running [ 232.340632][ T7584] ptp ptp0: delete virtual clock ptp1 [ 232.374157][ T7584] ptp ptp0: only physical clock in use now [ 235.281110][ T7614] zswap: compressor û not available [ 236.297624][ T7637] page: refcount:22 mapcount:0 mapping:0000000000000000 index:0xffff888078006000 pfn:0x78000 [ 236.346784][ T7637] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 236.391007][ T7637] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 236.446973][ T7637] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 236.513587][ T7637] raw: ffff888078006000 0000000000000000 00000016ffffffff 0000000000000000 [ 236.572977][ T7637] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 236.637264][ T7637] head: ffff888078006000 0000000000000000 00000016ffffffff 0000000000000000 [ 236.672484][ T7644] debugfs: '!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' already exists in 'ieee80211' [ 236.701774][ T7637] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 236.792050][ T51] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 236.831534][ T7637] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 236.851944][ T7637] page dumped because: unmovable page [ 236.888978][ T7637] page_owner tracks the page as allocated [ 236.903246][ T51] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 236.903288][ T51] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 236.919234][ T51] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 236.919274][ T51] Bluetooth: hci3: adv larger than maximum supported [ 236.921879][ T7637] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 5487, tgid 5487 (dhcpcd), ts 64294205889, free_ts 61451342519 [ 236.926714][ T51] Bluetooth: hci3: Unknown advertising packet type: 0x5f [ 236.926777][ T51] Bluetooth: hci3: Malformed LE Event: 0x0d [ 236.972347][ T7637] post_alloc_hook+0x1e1/0x250 [ 236.992722][ T7637] get_page_from_freelist+0x111d/0x3140 [ 237.043823][ T7637] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 237.063801][ T7637] alloc_pages_mpol+0x1fb/0x550 [ 237.088102][ T7637] alloc_pages_noprof+0x131/0x390 [ 237.093237][ T7637] skb_page_frag_refill+0x365/0x5b0 [ 237.137539][ T7637] try_fill_recv+0x7f1/0x2950 [ 237.142359][ T7637] virtnet_open+0x5f2/0x960 [ 237.147117][ T7637] __dev_open+0x3ad/0x960 [ 237.187610][ T7637] __dev_change_flags+0x558/0x6f0 [ 237.192731][ T7637] netif_change_flags+0x8d/0x160 [ 237.207019][ T7637] dev_change_flags+0xba/0x250 [ 237.229645][ T7637] devinet_ioctl+0x110b/0x1f10 [ 237.234701][ T7637] inet_ioctl+0x3aa/0x3f0 [ 237.248364][ T7637] sock_do_ioctl+0x118/0x280 [ 237.253151][ T7637] sock_ioctl+0x599/0x6b0 [ 237.270891][ T7637] page last free pid 5489 tgid 5489 stack trace: [ 237.295743][ T7637] __free_frozen_pages+0x822/0x1130 [ 237.303636][ T7637] __put_partials+0x127/0x160 [ 237.317686][ T7637] qlist_free_all+0x47/0xe0 [ 237.322886][ T7637] kasan_quarantine_reduce+0x1a0/0x1f0 [ 237.344453][ T7637] __kasan_slab_alloc+0x69/0x90 [ 237.350415][ T7637] __kmalloc_cache_noprof+0x2e1/0x810 [ 237.356313][ T7637] tomoyo_init_log+0x1a0/0x20c0 [ 237.361345][ T7637] tomoyo_supervisor+0x506/0x1340 [ 237.366533][ T7637] tomoyo_path_number_perm+0x445/0x580 [ 237.372233][ T7637] security_path_chmod+0x121/0x2c0 [ 237.377788][ T7637] chmod_common+0x19a/0x4d0 [ 237.382561][ T7637] do_fchmodat+0x10a/0x1b0 [ 237.387047][ T7637] __x64_sys_chmod+0x5e/0x80 [ 237.391927][ T7637] do_syscall_64+0x106/0xf80 [ 237.402367][ T7637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.639994][ T7677] sd 0:0:1:0: PR command failed: 1026 [ 239.727587][ T7677] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 239.745207][ T7677] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 240.937064][ T7705] futex_wake_op: syz.1.332 tries to shift op by -2048; fix this program [ 240.974858][ T7705] futex_wake_op: syz.1.332 tries to shift op by -2048; fix this program [ 241.769665][ T7717] Process accounting resumed [ 241.784185][ T7714] NFSD: Failed to start, no listeners configured. [ 244.496380][ T7762] netlink: 28 bytes leftover after parsing attributes in process `syz.1.340'. [ 246.096798][ T7788] Process accounting resumed [ 246.539787][ T7759] Process accounting resumed [ 246.689374][ T7800] : Can't lookup blockdev [ 247.043313][ T7805] netlink: 12 bytes leftover after parsing attributes in process `syz.1.351'. [ 250.060158][ T7842] queue_state_write: unsupported operation '' [ 250.066653][ T7842] queue_state_write: use 'run', 'start' or 'kick' [ 250.260208][ T7855] FAULT_INJECTION: forcing a failure. [ 250.260208][ T7855] name failslab, interval 1, probability 0, space 0, times 0 [ 250.307742][ T7855] CPU: 0 UID: 0 PID: 7855 Comm: syz.2.360 Tainted: G L syzkaller #0 PREEMPT(full) [ 250.307786][ T7855] Tainted: [L]=SOFTLOCKUP [ 250.307795][ T7855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 250.307808][ T7855] Call Trace: [ 250.307814][ T7855] [ 250.307822][ T7855] dump_stack_lvl+0x100/0x190 [ 250.307852][ T7855] should_fail_ex.cold+0x5/0xa [ 250.307872][ T7855] should_failslab+0xc2/0x120 [ 250.307894][ T7855] kmem_cache_alloc_noprof+0x83/0x780 [ 250.307914][ T7855] ? posix_lock_inode+0x427/0x23e0 [ 250.307945][ T7855] ? posix_lock_inode+0x427/0x23e0 [ 250.307972][ T7855] posix_lock_inode+0x427/0x23e0 [ 250.308007][ T7855] ? __pfx_posix_lock_inode+0x10/0x10 [ 250.308037][ T7855] ? common_file_perm+0x1ab/0x4f0 [ 250.308064][ T7855] vfs_lock_file+0xfb/0x150 [ 250.308107][ T7855] fcntl_setlk+0x469/0xde0 [ 250.308136][ T7855] ? __pfx_fcntl_setlk+0x10/0x10 [ 250.308180][ T7855] ? rep_movs_alternative+0x30/0x90 [ 250.308205][ T7855] do_fcntl+0xf39/0x1670 [ 250.308229][ T7855] ? __pfx_do_fcntl+0x10/0x10 [ 250.308250][ T7855] ? __fget_files+0x215/0x3d0 [ 250.308274][ T7855] ? tomoyo_file_fcntl+0x6c/0xc0 [ 250.308302][ T7855] __x64_sys_fcntl+0x163/0x200 [ 250.308328][ T7855] do_syscall_64+0x106/0xf80 [ 250.308354][ T7855] ? clear_bhb_loop+0x40/0x90 [ 250.308375][ T7855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.308393][ T7855] RIP: 0033:0x7fc24059bf79 [ 250.308409][ T7855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.308426][ T7855] RSP: 002b:00007fc23e7d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 250.308445][ T7855] RAX: ffffffffffffffda RBX: 00007fc240816180 RCX: 00007fc24059bf79 [ 250.308456][ T7855] RDX: 0000000000001298 RSI: 0000000000000026 RDI: 0000000000000007 [ 250.308466][ T7855] RBP: 00007fc2406327e0 R08: 0000000000000000 R09: 0000000000000000 [ 250.308477][ T7855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.308487][ T7855] R13: 00007fc240816218 R14: 00007fc240816180 R15: 00007fffa3a53648 [ 250.308519][ T7855] [ 250.957006][ T7850] zswap: compressor û not available [ 251.190403][ T7844] sd 0:0:1:0: PR command failed: 1026 [ 251.195877][ T7844] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 251.241712][ T7844] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 251.307288][ T7872] page: refcount:22 mapcount:0 mapping:0000000000000000 index:0xffff888078006000 pfn:0x78000 [ 251.397013][ T7872] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 251.427690][ T7872] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 251.436840][ T7872] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 251.448575][ T7872] raw: ffff888078006000 0000000000000000 00000016ffffffff 0000000000000000 [ 251.462757][ T7872] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 251.565504][ T7872] head: ffff888078006000 0000000000000000 00000016ffffffff 0000000000000000 [ 251.637593][ T7872] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 251.759820][ T7872] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 251.826360][ T7872] page dumped because: unmovable page [ 251.834606][ T7872] page_owner tracks the page as allocated [ 251.892760][ T7872] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 5487, tgid 5487 (dhcpcd), ts 64294205889, free_ts 61451342519 [ 251.968922][ T7872] post_alloc_hook+0x1e1/0x250 [ 251.973990][ T7872] get_page_from_freelist+0x111d/0x3140 [ 251.984179][ T7872] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 251.992739][ T7872] alloc_pages_mpol+0x1fb/0x550 [ 252.010064][ T7872] alloc_pages_noprof+0x131/0x390 [ 252.015225][ T7872] skb_page_frag_refill+0x365/0x5b0 [ 252.039243][ T7872] try_fill_recv+0x7f1/0x2950 [ 252.066614][ T7872] virtnet_open+0x5f2/0x960 [ 252.085226][ T7872] __dev_open+0x3ad/0x960 [ 252.090590][ T7872] __dev_change_flags+0x558/0x6f0 [ 252.095956][ T7872] netif_change_flags+0x8d/0x160 [ 252.130131][ T7872] dev_change_flags+0xba/0x250 [ 252.145694][ T7872] devinet_ioctl+0x110b/0x1f10 [ 252.170900][ T7872] inet_ioctl+0x3aa/0x3f0 [ 252.177620][ T7872] sock_do_ioctl+0x118/0x280 [ 252.184485][ T7872] sock_ioctl+0x599/0x6b0 [ 252.196227][ T7872] page last free pid 5489 tgid 5489 stack trace: [ 252.223341][ T7872] __free_frozen_pages+0x822/0x1130 [ 252.233477][ T7872] __put_partials+0x127/0x160 [ 252.247337][ T7872] qlist_free_all+0x47/0xe0 [ 252.257588][ T7872] kasan_quarantine_reduce+0x1a0/0x1f0 [ 252.275665][ T7872] __kasan_slab_alloc+0x69/0x90 [ 252.281797][ T7872] __kmalloc_cache_noprof+0x2e1/0x810 [ 252.296033][ T7872] tomoyo_init_log+0x1a0/0x20c0 [ 252.303120][ T7872] tomoyo_supervisor+0x506/0x1340 [ 252.312610][ T7872] tomoyo_path_number_perm+0x445/0x580 [ 252.325596][ T7872] security_path_chmod+0x121/0x2c0 [ 252.335108][ T7872] chmod_common+0x19a/0x4d0 [ 252.342812][ T7872] do_fchmodat+0x10a/0x1b0 [ 252.351076][ T7872] __x64_sys_chmod+0x5e/0x80 [ 252.362909][ T7872] do_syscall_64+0x106/0xf80 [ 252.393496][ T7872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.071068][ T7894] NFSD: Failed to start, no listeners configured. [ 254.572438][ T7890] Process accounting resumed [ 254.852132][ T7916] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 254.917771][ T51] Bluetooth: hci3: unexpected event 0x1c length: 725 > 5 [ 254.967279][ T7923] zram: Added device: zram0 [ 255.438164][ T7935] page: refcount:22 mapcount:0 mapping:0000000000000000 index:0xffff888078006000 pfn:0x78000 [ 255.463875][ T7935] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 255.490036][ T7935] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 255.549088][ T7935] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 255.608285][ T7935] raw: ffff888078006000 0000000000000000 00000016ffffffff 0000000000000000 [ 255.641052][ T7935] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 255.675087][ T7935] head: ffff888078006000 0000000000000000 00000016ffffffff 0000000000000000 [ 255.799503][ T7935] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 255.857588][ T7935] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 255.890428][ T7935] page dumped because: unmovable page [ 255.895864][ T7935] page_owner tracks the page as allocated [ 255.914484][ T7935] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 5487, tgid 5487 (dhcpcd), ts 64294205889, free_ts 61451342519 [ 255.973016][ T7935] post_alloc_hook+0x1e1/0x250 [ 255.993431][ T7935] get_page_from_freelist+0x111d/0x3140 [ 256.017601][ T7935] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 256.077614][ T7935] alloc_pages_mpol+0x1fb/0x550 [ 256.082646][ T7935] alloc_pages_noprof+0x131/0x390 [ 256.097145][ T7935] skb_page_frag_refill+0x365/0x5b0 [ 256.108118][ T7935] try_fill_recv+0x7f1/0x2950 [ 256.207703][ T7935] virtnet_open+0x5f2/0x960 [ 256.241306][ T7935] __dev_open+0x3ad/0x960 [ 256.246247][ T7935] __dev_change_flags+0x558/0x6f0 [ 256.279269][ T7935] netif_change_flags+0x8d/0x160 [ 256.297637][ T7935] dev_change_flags+0xba/0x250 [ 256.302496][ T7935] devinet_ioctl+0x110b/0x1f10 [ 256.333129][ T7935] inet_ioctl+0x3aa/0x3f0 [ 256.371590][ T7935] sock_do_ioctl+0x118/0x280 [ 256.376276][ T7935] sock_ioctl+0x599/0x6b0 [ 256.403485][ T7935] page last free pid 5489 tgid 5489 stack trace: [ 256.433969][ T7935] __free_frozen_pages+0x822/0x1130 [ 256.447326][ T7935] __put_partials+0x127/0x160 [ 256.476144][ T7935] qlist_free_all+0x47/0xe0 [ 256.557558][ T7935] kasan_quarantine_reduce+0x1a0/0x1f0 [ 256.565011][ T7935] __kasan_slab_alloc+0x69/0x90 [ 256.606737][ T7935] __kmalloc_cache_noprof+0x2e1/0x810 [ 256.623031][ T7935] tomoyo_init_log+0x1a0/0x20c0 [ 256.634911][ T7935] tomoyo_supervisor+0x506/0x1340 [ 256.660789][ T7935] tomoyo_path_number_perm+0x445/0x580 [ 256.668991][ T7935] security_path_chmod+0x121/0x2c0 [ 256.676845][ T7935] chmod_common+0x19a/0x4d0 [ 256.702908][ T7935] do_fchmodat+0x10a/0x1b0 [ 256.726748][ T7935] __x64_sys_chmod+0x5e/0x80 [ 256.757601][ T7935] do_syscall_64+0x106/0xf80 [ 256.777627][ T7935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.406160][ T7980] ptp ptp0: new virtual clock ptp1 [ 258.417580][ T7980] ptp ptp0: guarantee physical clock free running [ 258.455290][ T7980] ptp ptp0: delete virtual clock ptp1 [ 258.468920][ T7978] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 258.522289][ T7980] ptp ptp0: only physical clock in use now [ 259.841966][ T8006] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 260.138043][ T8009] netlink: 36 bytes leftover after parsing attributes in process `syz.2.387'. [ 260.944064][ T8022] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' [ 261.038678][ T8022] CPU: 1 UID: 0 PID: 8022 Comm: syz.1.391 Tainted: G L syzkaller #0 PREEMPT(full) [ 261.038714][ T8022] Tainted: [L]=SOFTLOCKUP [ 261.038720][ T8022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 261.038732][ T8022] Call Trace: [ 261.038738][ T8022] [ 261.038746][ T8022] dump_stack_lvl+0x100/0x190 [ 261.038776][ T8022] sysfs_warn_dup.cold+0x1c/0x28 [ 261.038801][ T8022] sysfs_do_create_link_sd+0x113/0x140 [ 261.038827][ T8022] sysfs_create_link+0x61/0xc0 [ 261.038850][ T8022] device_add+0x675/0x1950 [ 261.038871][ T8022] ? __pfx_device_add+0x10/0x10 [ 261.038888][ T8022] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 261.038915][ T8022] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 261.038950][ T8022] wiphy_register+0x1e58/0x2d30 [ 261.038972][ T8022] ? __rtnl_unlock+0xb9/0xf0 [ 261.039003][ T8022] ? __pfx_wiphy_register+0x10/0x10 [ 261.039025][ T8022] ? __asan_memset+0x23/0x50 [ 261.039052][ T8022] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 261.039081][ T8022] ieee80211_register_hw+0x2c11/0x4040 [ 261.039113][ T8022] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 261.039135][ T8022] ? __pfx___debug_object_init+0x10/0x10 [ 261.039167][ T8022] ? find_held_lock+0x2b/0x80 [ 261.039190][ T8022] ? net_generic+0xea/0x2a0 [ 261.039217][ T8022] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 261.039241][ T8022] ? __hrtimer_setup+0x178/0x280 [ 261.039262][ T8022] mac80211_hwsim_new_radio+0x2847/0x57c0 [ 261.039296][ T8022] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 261.039323][ T8022] hwsim_new_radio_nl+0xc1f/0x1340 [ 261.039341][ T8022] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc8/0x290 [ 261.039370][ T8022] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 261.039400][ T8022] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x290 [ 261.039426][ T8022] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b4/0x290 [ 261.039456][ T8022] genl_family_rcv_msg_doit+0x214/0x300 [ 261.039484][ T8022] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 261.039509][ T8022] ? genl_get_cmd+0x3ef/0x720 [ 261.039538][ T8022] ? bpf_lsm_capable+0x9/0x10 [ 261.039560][ T8022] ? security_capable+0x80/0x260 [ 261.039588][ T8022] ? ns_capable+0xd2/0xf0 [ 261.039615][ T8022] genl_rcv_msg+0x560/0x800 [ 261.039651][ T8022] ? __pfx_genl_rcv_msg+0x10/0x10 [ 261.039677][ T8022] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 261.039709][ T8022] netlink_rcv_skb+0x159/0x420 [ 261.039732][ T8022] ? __pfx_genl_rcv_msg+0x10/0x10 [ 261.039758][ T8022] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 261.039791][ T8022] ? netlink_deliver_tap+0x1ae/0xcc0 [ 261.039816][ T8022] genl_rcv+0x28/0x40 [ 261.039842][ T8022] netlink_unicast+0x5aa/0x870 [ 261.039869][ T8022] ? __pfx_netlink_unicast+0x10/0x10 [ 261.039890][ T8022] ? __pfx___might_resched+0x10/0x10 [ 261.039911][ T8022] ? __lock_acquire+0x4a5/0x2630 [ 261.039935][ T8022] netlink_sendmsg+0x8b0/0xda0 [ 261.039962][ T8022] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.039982][ T8022] ? __import_iovec+0x1d2/0x640 [ 261.040004][ T8022] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 261.040034][ T8022] ____sys_sendmsg+0xa54/0xc30 [ 261.040062][ T8022] ? __pfx_____sys_sendmsg+0x10/0x10 [ 261.040092][ T8022] ? __pfx_futex_wake_mark+0x10/0x10 [ 261.040117][ T8022] ___sys_sendmsg+0x190/0x1e0 [ 261.040146][ T8022] ? __pfx____sys_sendmsg+0x10/0x10 [ 261.040201][ T8022] __sys_sendmsg+0x170/0x220 [ 261.040222][ T8022] ? __pfx___sys_sendmsg+0x10/0x10 [ 261.040241][ T8022] ? __x64_sys_futex+0x34f/0x4d0 [ 261.040272][ T8022] do_syscall_64+0x106/0xf80 [ 261.040299][ T8022] ? clear_bhb_loop+0x40/0x90 [ 261.040322][ T8022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.040340][ T8022] RIP: 0033:0x7ff533f9bf79 [ 261.040356][ T8022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.040374][ T8022] RSP: 002b:00007ff534f3c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 261.040392][ T8022] RAX: ffffffffffffffda RBX: 00007ff534215fa0 RCX: 00007ff533f9bf79 [ 261.040404][ T8022] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 261.040415][ T8022] RBP: 00007ff5340327e0 R08: 0000000000000000 R09: 0000000000000000 [ 261.040426][ T8022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.040437][ T8022] R13: 00007ff534216038 R14: 00007ff534215fa0 R15: 00007ffd19458138 [ 261.040461][ T8022] [ 261.720711][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.728503][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.213815][ T8059] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 264.981488][ T8075] __vm_enough_memory: pid: 8075, comm: syz.1.398, bytes: 4398046511104 not enough memory for the allocation [ 265.036221][ T8076] page: refcount:22 mapcount:0 mapping:0000000000000000 index:0xffff888078006000 pfn:0x78000 [ 265.070100][ T8076] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 265.116489][ T8076] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 265.232889][ T8076] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 265.336627][ T8076] raw: ffff888078006000 0000000000000000 00000016ffffffff 0000000000000000 [ 265.420763][ T8076] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 265.478471][ T8076] head: ffff888078006000 0000000000000000 00000016ffffffff 0000000000000000 [ 265.506055][ T8076] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 265.545746][ T8076] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 265.562984][ T8076] page dumped because: unmovable page [ 265.583425][ T8076] page_owner tracks the page as allocated [ 265.613036][ T8076] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 5487, tgid 5487 (dhcpcd), ts 64294205889, free_ts 61451342519 [ 265.680748][ T8076] post_alloc_hook+0x1e1/0x250 [ 265.698792][ T8076] get_page_from_freelist+0x111d/0x3140 [ 265.717512][ T8076] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 265.723638][ T8076] alloc_pages_mpol+0x1fb/0x550 [ 265.754757][ T8076] alloc_pages_noprof+0x131/0x390 [ 265.777928][ T8076] skb_page_frag_refill+0x365/0x5b0 [ 265.820149][ T8076] try_fill_recv+0x7f1/0x2950 [ 265.846051][ T8076] virtnet_open+0x5f2/0x960 [ 265.856175][ T8076] __dev_open+0x3ad/0x960 [ 265.870820][ T8076] __dev_change_flags+0x558/0x6f0 [ 265.886131][ T8076] netif_change_flags+0x8d/0x160 [ 265.907668][ T8076] dev_change_flags+0xba/0x250 [ 265.912624][ T8076] devinet_ioctl+0x110b/0x1f10 [ 265.937541][ T8076] inet_ioctl+0x3aa/0x3f0 [ 265.942152][ T8076] sock_do_ioctl+0x118/0x280 [ 265.946887][ T8076] sock_ioctl+0x599/0x6b0 [ 265.967559][ T8076] page last free pid 5489 tgid 5489 stack trace: [ 265.981342][ T8076] __free_frozen_pages+0x822/0x1130 [ 265.992623][ T8076] __put_partials+0x127/0x160 [ 266.002775][ T8076] qlist_free_all+0x47/0xe0 [ 266.017531][ T8076] kasan_quarantine_reduce+0x1a0/0x1f0 [ 266.027564][ T8076] __kasan_slab_alloc+0x69/0x90 [ 266.032763][ T8076] __kmalloc_cache_noprof+0x2e1/0x810 [ 266.047569][ T8076] tomoyo_init_log+0x1a0/0x20c0 [ 266.057560][ T8076] tomoyo_supervisor+0x506/0x1340 [ 266.062868][ T8076] tomoyo_path_number_perm+0x445/0x580 [ 266.087559][ T8076] security_path_chmod+0x121/0x2c0 [ 266.103168][ T8076] chmod_common+0x19a/0x4d0 [ 266.117564][ T8076] do_fchmodat+0x10a/0x1b0 [ 266.127837][ T8076] __x64_sys_chmod+0x5e/0x80 [ 266.132505][ T8076] do_syscall_64+0x106/0xf80 [ 266.147548][ T8076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.239394][ T51] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 266.399619][ T51] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 266.399672][ T51] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 266.414803][ T51] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 266.414858][ T51] Bluetooth: hci0: adv larger than maximum supported [ 266.431081][ T51] Bluetooth: hci0: Unknown advertising packet type: 0x5f [ 266.438775][ T51] Bluetooth: hci0: Malformed LE Event: 0x0d [ 266.623083][ T8088] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' [ 266.776918][ T8088] CPU: 1 UID: 0 PID: 8088 Comm: syz.1.403 Tainted: G L syzkaller #0 PREEMPT(full) [ 266.776970][ T8088] Tainted: [L]=SOFTLOCKUP [ 266.776980][ T8088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 266.776998][ T8088] Call Trace: [ 266.777007][ T8088] [ 266.777019][ T8088] dump_stack_lvl+0x100/0x190 [ 266.777068][ T8088] sysfs_warn_dup.cold+0x1c/0x28 [ 266.777110][ T8088] sysfs_do_create_link_sd+0x113/0x140 [ 266.777151][ T8088] sysfs_create_link+0x61/0xc0 [ 266.777187][ T8088] device_add+0x675/0x1950 [ 266.777223][ T8088] ? __pfx_device_add+0x10/0x10 [ 266.777253][ T8088] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 266.777297][ T8088] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 266.777367][ T8088] wiphy_register+0x1e58/0x2d30 [ 266.777402][ T8088] ? __rtnl_unlock+0xb9/0xf0 [ 266.777457][ T8088] ? __pfx_wiphy_register+0x10/0x10 [ 266.777494][ T8088] ? __asan_memset+0x23/0x50 [ 266.777541][ T8088] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 266.777589][ T8088] ieee80211_register_hw+0x2c11/0x4040 [ 266.777640][ T8088] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 266.777673][ T8088] ? __pfx___debug_object_init+0x10/0x10 [ 266.777723][ T8088] ? find_held_lock+0x2b/0x80 [ 266.777759][ T8088] ? net_generic+0xea/0x2a0 [ 266.777802][ T8088] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 266.777841][ T8088] ? __hrtimer_setup+0x178/0x280 [ 266.777875][ T8088] mac80211_hwsim_new_radio+0x2847/0x57c0 [ 266.777935][ T8088] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 266.777979][ T8088] hwsim_new_radio_nl+0xc1f/0x1340 [ 266.778008][ T8088] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc8/0x290 [ 266.778057][ T8088] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 266.778101][ T8088] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x290 [ 266.778144][ T8088] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b4/0x290 [ 266.778195][ T8088] genl_family_rcv_msg_doit+0x214/0x300 [ 266.778242][ T8088] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 266.778281][ T8088] ? genl_get_cmd+0x3ef/0x720 [ 266.778339][ T8088] ? bpf_lsm_capable+0x9/0x10 [ 266.778378][ T8088] ? security_capable+0x80/0x260 [ 266.778419][ T8088] ? ns_capable+0xd2/0xf0 [ 266.778465][ T8088] genl_rcv_msg+0x560/0x800 [ 266.778506][ T8088] ? __pfx_genl_rcv_msg+0x10/0x10 [ 266.778547][ T8088] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 266.778595][ T8088] netlink_rcv_skb+0x159/0x420 [ 266.778632][ T8088] ? __pfx_genl_rcv_msg+0x10/0x10 [ 266.778673][ T8088] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 266.778728][ T8088] ? netlink_deliver_tap+0x1ae/0xcc0 [ 266.778770][ T8088] genl_rcv+0x28/0x40 [ 266.778806][ T8088] netlink_unicast+0x5aa/0x870 [ 266.778848][ T8088] ? __pfx_netlink_unicast+0x10/0x10 [ 266.778879][ T8088] ? __pfx___might_resched+0x10/0x10 [ 266.778913][ T8088] ? __lock_acquire+0x4a5/0x2630 [ 266.778954][ T8088] netlink_sendmsg+0x8b0/0xda0 [ 266.778998][ T8088] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.779031][ T8088] ? __import_iovec+0x1d2/0x640 [ 266.779066][ T8088] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 266.779114][ T8088] ____sys_sendmsg+0xa54/0xc30 [ 266.779158][ T8088] ? __pfx_____sys_sendmsg+0x10/0x10 [ 266.779206][ T8088] ? __pfx_futex_wake_mark+0x10/0x10 [ 266.779246][ T8088] ___sys_sendmsg+0x190/0x1e0 [ 266.779289][ T8088] ? __pfx____sys_sendmsg+0x10/0x10 [ 266.779392][ T8088] __sys_sendmsg+0x170/0x220 [ 266.779430][ T8088] ? __pfx___sys_sendmsg+0x10/0x10 [ 266.779463][ T8088] ? __x64_sys_futex+0x34f/0x4d0 [ 266.779519][ T8088] do_syscall_64+0x106/0xf80 [ 266.779566][ T8088] ? clear_bhb_loop+0x40/0x90 [ 266.779611][ T8088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.779642][ T8088] RIP: 0033:0x7ff533f9bf79 [ 266.779669][ T8088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.779699][ T8088] RSP: 002b:00007ff534f3c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 266.779731][ T8088] RAX: ffffffffffffffda RBX: 00007ff534215fa0 RCX: 00007ff533f9bf79 [ 266.779752][ T8088] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 266.779771][ T8088] RBP: 00007ff5340327e0 R08: 0000000000000000 R09: 0000000000000000 [ 266.779790][ T8088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.779808][ T8088] R13: 00007ff534216038 R14: 00007ff534215fa0 R15: 00007ffd19458138 [ 266.779850][ T8088] [ 267.861929][ T8100] page: refcount:22 mapcount:0 mapping:0000000000000000 index:0xffff888078006000 pfn:0x78000 [ 267.874605][ T8100] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 267.918980][ T8100] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 267.977974][ T8100] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 268.047610][ T8100] raw: ffff888078006000 0000000000000000 00000016ffffffff 0000000000000000 [ 268.056484][ T8100] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 268.150978][ T8100] head: ffff888078006000 0000000000000000 00000016ffffffff 0000000000000000 [ 268.206087][ T8100] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 268.229292][ T8100] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 268.304663][ T8100] page dumped because: unmovable page [ 268.358353][ T8100] page_owner tracks the page as allocated [ 268.417941][ T8100] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 5487, tgid 5487 (dhcpcd), ts 64294205889, free_ts 61451342519 [ 268.558058][ T8100] post_alloc_hook+0x1e1/0x250 [ 268.597954][ T8100] get_page_from_freelist+0x111d/0x3140 [ 268.677670][ T8100] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 268.721985][ T8100] alloc_pages_mpol+0x1fb/0x550 [ 268.726916][ T8100] alloc_pages_noprof+0x131/0x390 [ 268.756230][ T8100] skb_page_frag_refill+0x365/0x5b0 [ 268.761594][ T8100] try_fill_recv+0x7f1/0x2950 [ 268.767929][ T8100] virtnet_open+0x5f2/0x960 [ 268.772619][ T8100] __dev_open+0x3ad/0x960 [ 268.777087][ T8100] __dev_change_flags+0x558/0x6f0 [ 268.977590][ T8100] netif_change_flags+0x8d/0x160 [ 268.982758][ T8100] dev_change_flags+0xba/0x250 [ 269.067644][ T8100] devinet_ioctl+0x110b/0x1f10 [ 269.072582][ T8100] inet_ioctl+0x3aa/0x3f0 [ 269.076937][ T8100] sock_do_ioctl+0x118/0x280 [ 269.134237][ T8100] sock_ioctl+0x599/0x6b0 [ 269.159654][ T8100] page last free pid 5489 tgid 5489 stack trace: [ 269.166136][ T8100] __free_frozen_pages+0x822/0x1130 [ 269.245025][ T8100] __put_partials+0x127/0x160 [ 269.274095][ T8100] qlist_free_all+0x47/0xe0 [ 269.287788][ T8100] kasan_quarantine_reduce+0x1a0/0x1f0 [ 269.338023][ T8100] __kasan_slab_alloc+0x69/0x90 [ 269.350007][ T8100] __kmalloc_cache_noprof+0x2e1/0x810 [ 269.355569][ T8100] tomoyo_init_log+0x1a0/0x20c0 [ 269.381560][ T8100] tomoyo_supervisor+0x506/0x1340 [ 269.437558][ T8100] tomoyo_path_number_perm+0x445/0x580 [ 269.443149][ T8100] security_path_chmod+0x121/0x2c0 [ 269.467625][ T8100] chmod_common+0x19a/0x4d0 [ 269.472735][ T8100] do_fchmodat+0x10a/0x1b0 [ 269.479702][ T8100] __x64_sys_chmod+0x5e/0x80 [ 269.484461][ T8100] do_syscall_64+0x106/0xf80 [ 269.519195][ T8100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.750637][ T8148] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' [ 272.838794][ T8148] CPU: 1 UID: 0 PID: 8148 Comm: syz.3.415 Tainted: G L syzkaller #0 PREEMPT(full) [ 272.838843][ T8148] Tainted: [L]=SOFTLOCKUP [ 272.838854][ T8148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 272.838871][ T8148] Call Trace: [ 272.838881][ T8148] [ 272.838891][ T8148] dump_stack_lvl+0x100/0x190 [ 272.838937][ T8148] sysfs_warn_dup.cold+0x1c/0x28 [ 272.838980][ T8148] sysfs_do_create_link_sd+0x113/0x140 [ 272.839022][ T8148] sysfs_create_link+0x61/0xc0 [ 272.839059][ T8148] device_add+0x675/0x1950 [ 272.839094][ T8148] ? __pfx_device_add+0x10/0x10 [ 272.839124][ T8148] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 272.839165][ T8148] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 272.839223][ T8148] wiphy_register+0x1e58/0x2d30 [ 272.839269][ T8148] ? __rtnl_unlock+0xb9/0xf0 [ 272.839320][ T8148] ? __pfx_wiphy_register+0x10/0x10 [ 272.839358][ T8148] ? __asan_memset+0x23/0x50 [ 272.839403][ T8148] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 272.839454][ T8148] ieee80211_register_hw+0x2c11/0x4040 [ 272.839508][ T8148] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 272.839543][ T8148] ? __pfx___debug_object_init+0x10/0x10 [ 272.839596][ T8148] ? find_held_lock+0x2b/0x80 [ 272.839634][ T8148] ? net_generic+0xea/0x2a0 [ 272.839678][ T8148] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 272.839719][ T8148] ? __hrtimer_setup+0x178/0x280 [ 272.839754][ T8148] mac80211_hwsim_new_radio+0x2847/0x57c0 [ 272.839813][ T8148] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 272.839860][ T8148] hwsim_new_radio_nl+0xc1f/0x1340 [ 272.839890][ T8148] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc8/0x290 [ 272.839939][ T8148] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 272.839984][ T8148] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x290 [ 272.840026][ T8148] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b4/0x290 [ 272.840077][ T8148] genl_family_rcv_msg_doit+0x214/0x300 [ 272.840124][ T8148] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 272.840165][ T8148] ? genl_get_cmd+0x3ef/0x720 [ 272.840214][ T8148] ? bpf_lsm_capable+0x9/0x10 [ 272.840268][ T8148] ? security_capable+0x80/0x260 [ 272.840312][ T8148] ? ns_capable+0xd2/0xf0 [ 272.840358][ T8148] genl_rcv_msg+0x560/0x800 [ 272.840404][ T8148] ? __pfx_genl_rcv_msg+0x10/0x10 [ 272.840449][ T8148] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 272.840496][ T8148] netlink_rcv_skb+0x159/0x420 [ 272.840542][ T8148] ? __pfx_genl_rcv_msg+0x10/0x10 [ 272.840585][ T8148] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 272.840638][ T8148] ? netlink_deliver_tap+0x1ae/0xcc0 [ 272.840677][ T8148] genl_rcv+0x28/0x40 [ 272.840715][ T8148] netlink_unicast+0x5aa/0x870 [ 272.840758][ T8148] ? __pfx_netlink_unicast+0x10/0x10 [ 272.840793][ T8148] ? __pfx___might_resched+0x10/0x10 [ 272.840828][ T8148] ? __lock_acquire+0x4a5/0x2630 [ 272.840872][ T8148] netlink_sendmsg+0x8b0/0xda0 [ 272.840918][ T8148] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.840950][ T8148] ? __import_iovec+0x1d2/0x640 [ 272.840987][ T8148] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 272.841038][ T8148] ____sys_sendmsg+0xa54/0xc30 [ 272.841086][ T8148] ? __pfx_____sys_sendmsg+0x10/0x10 [ 272.841149][ T8148] ? __pfx_futex_wake_mark+0x10/0x10 [ 272.841190][ T8148] ___sys_sendmsg+0x190/0x1e0 [ 272.841235][ T8148] ? __pfx____sys_sendmsg+0x10/0x10 [ 272.841334][ T8148] __sys_sendmsg+0x170/0x220 [ 272.841367][ T8148] ? __pfx___sys_sendmsg+0x10/0x10 [ 272.841401][ T8148] ? __x64_sys_futex+0x34f/0x4d0 [ 272.841457][ T8148] do_syscall_64+0x106/0xf80 [ 272.841501][ T8148] ? clear_bhb_loop+0x40/0x90 [ 272.841538][ T8148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.841568][ T8148] RIP: 0033:0x7f62f779bf79 [ 272.841594][ T8148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.841623][ T8148] RSP: 002b:00007f62f85ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.841654][ T8148] RAX: ffffffffffffffda RBX: 00007f62f7a15fa0 RCX: 00007f62f779bf79 [ 272.841675][ T8148] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 272.841693][ T8148] RBP: 00007f62f78327e0 R08: 0000000000000000 R09: 0000000000000000 [ 272.841712][ T8148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.841729][ T8148] R13: 00007f62f7a16038 R14: 00007f62f7a15fa0 R15: 00007fff5d2b2978 [ 272.841774][ T8148] [ 274.126713][ T51] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 274.265528][ T8170] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 274.278658][ T51] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 274.278686][ T51] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 274.296888][ T51] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 274.296927][ T51] Bluetooth: hci2: adv larger than maximum supported [ 274.304519][ T51] Bluetooth: hci2: Unknown advertising packet type: 0x5f [ 274.311272][ T51] Bluetooth: hci2: Malformed LE Event: 0x0d [ 277.262111][ T8188] Process accounting paused [ 277.359218][ T8201] Process accounting paused [ 277.617940][ T8208] netlink: 28 bytes leftover after parsing attributes in process `syz.2.423'. [ 278.096583][ T8219] FAULT_INJECTION: forcing a failure. [ 278.096583][ T8219] name failslab, interval 1, probability 0, space 0, times 0 [ 278.109934][ T8219] CPU: 0 UID: 0 PID: 8219 Comm: syz.2.426 Tainted: G L syzkaller #0 PREEMPT(full) [ 278.109984][ T8219] Tainted: [L]=SOFTLOCKUP [ 278.109994][ T8219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 278.110013][ T8219] Call Trace: [ 278.110023][ T8219] [ 278.110035][ T8219] dump_stack_lvl+0x100/0x190 [ 278.110085][ T8219] should_fail_ex.cold+0x5/0xa [ 278.110119][ T8219] should_failslab+0xc2/0x120 [ 278.110155][ T8219] __kmalloc_cache_noprof+0x80/0x810 [ 278.110200][ T8219] ? rcu_is_watching+0x12/0xc0 [ 278.110235][ T8219] ? single_open+0x4d/0x1d0 [ 278.110298][ T8219] ? __pfx_filesystems_proc_show+0x10/0x10 [ 278.110335][ T8219] ? single_open+0x4d/0x1d0 [ 278.110374][ T8219] single_open+0x4d/0x1d0 [ 278.110415][ T8219] ? __pfx_proc_single_open+0x10/0x10 [ 278.110461][ T8219] proc_reg_open+0x2ab/0x5f0 [ 278.110504][ T8219] do_dentry_open+0x6d8/0x1660 [ 278.110534][ T8219] ? __pfx_proc_reg_open+0x10/0x10 [ 278.110586][ T8219] vfs_open+0x82/0x3f0 [ 278.110631][ T8219] path_openat+0x208c/0x31a0 [ 278.110678][ T8219] ? __pfx_path_openat+0x10/0x10 [ 278.110727][ T8219] do_file_open+0x20e/0x430 [ 278.110763][ T8219] ? __pfx_do_file_open+0x10/0x10 [ 278.110825][ T8219] ? alloc_fd+0x476/0x790 [ 278.110859][ T8219] ? do_getname+0x191/0x390 [ 278.110902][ T8219] do_sys_openat2+0x10d/0x1e0 [ 278.110943][ T8219] ? __pfx_do_sys_openat2+0x10/0x10 [ 278.110987][ T8219] ? __fget_files+0x21f/0x3d0 [ 278.111025][ T8219] __x64_sys_openat+0x12d/0x210 [ 278.111068][ T8219] ? __pfx___x64_sys_openat+0x10/0x10 [ 278.111108][ T8219] ? xfd_validate_state+0x129/0x190 [ 278.111160][ T8219] do_syscall_64+0x106/0xf80 [ 278.111200][ T8219] ? clear_bhb_loop+0x40/0x90 [ 278.111236][ T8219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.111275][ T8219] RIP: 0033:0x7fc24059bf79 [ 278.111300][ T8219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.111329][ T8219] RSP: 002b:00007fc23e7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 278.111359][ T8219] RAX: ffffffffffffffda RBX: 00007fc240816090 RCX: 00007fc24059bf79 [ 278.111379][ T8219] RDX: 00000000001a1442 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 278.111399][ T8219] RBP: 00007fc2406327e0 R08: 0000000000000000 R09: 0000000000000000 [ 278.111417][ T8219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.111434][ T8219] R13: 00007fc240816128 R14: 00007fc240816090 R15: 00007fffa3a53648 [ 278.111475][ T8219] [ 279.829879][ T8242] FAULT_INJECTION: forcing a failure. [ 279.829879][ T8242] name failslab, interval 1, probability 0, space 0, times 0 [ 279.842894][ T8242] CPU: 1 UID: 8 PID: 8242 Comm: syz.0.431 Tainted: G L syzkaller #0 PREEMPT(full) [ 279.842945][ T8242] Tainted: [L]=SOFTLOCKUP [ 279.842955][ T8242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 279.842974][ T8242] Call Trace: [ 279.842985][ T8242] [ 279.842996][ T8242] dump_stack_lvl+0x100/0x190 [ 279.843045][ T8242] should_fail_ex.cold+0x5/0xa [ 279.843081][ T8242] should_failslab+0xc2/0x120 [ 279.843119][ T8242] __kmalloc_node_track_caller_noprof+0xf9/0x9d0 [ 279.843153][ T8242] ? rcu_is_watching+0x12/0xc0 [ 279.843191][ T8242] ? key_alloc+0x423/0x1310 [ 279.843230][ T8242] ? kmemdup_noprof+0x29/0x60 [ 279.843260][ T8242] kmemdup_noprof+0x29/0x60 [ 279.843292][ T8242] key_alloc+0x423/0x1310 [ 279.843339][ T8242] ? __pfx_key_alloc+0x10/0x10 [ 279.843372][ T8242] ? __pfx_key_default_cmp+0x10/0x10 [ 279.843411][ T8242] ? __pfx_keyring_search_iterator+0x10/0x10 [ 279.843453][ T8242] keyring_alloc+0x44/0xc0 [ 279.843495][ T8242] look_up_user_keyrings+0x465/0x790 [ 279.843561][ T8242] ? __pfx_look_up_user_keyrings+0x10/0x10 [ 279.843607][ T8242] ? futex_wait+0x125/0x380 [ 279.843644][ T8242] ? __pfx_futex_wait+0x10/0x10 [ 279.843689][ T8242] lookup_user_key+0xbb1/0x1300 [ 279.843725][ T8242] ? __pfx_lookup_user_key+0x10/0x10 [ 279.843767][ T8242] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 279.843824][ T8242] ? __x64_sys_futex+0x34f/0x4d0 [ 279.843850][ T8242] ? __x64_sys_futex+0x358/0x4d0 [ 279.843887][ T8242] keyctl_session_to_parent+0x28/0xae0 [ 279.843941][ T8242] __do_sys_keyctl+0x2b1/0x5a0 [ 279.843992][ T8242] do_syscall_64+0x106/0xf80 [ 279.844036][ T8242] ? clear_bhb_loop+0x40/0x90 [ 279.844073][ T8242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.844104][ T8242] RIP: 0033:0x7f76df59bf79 [ 279.844132][ T8242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.844161][ T8242] RSP: 002b:00007f76dd7ac028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 279.844191][ T8242] RAX: ffffffffffffffda RBX: 00007f76df816180 RCX: 00007f76df59bf79 [ 279.844212][ T8242] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000012 [ 279.844231][ T8242] RBP: 00007f76df6327e0 R08: 0000000000000001 R09: 0000000000000000 [ 279.844249][ T8242] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 279.844266][ T8242] R13: 00007f76df816218 R14: 00007f76df816180 R15: 00007ffc90dbc8a8 [ 279.844308][ T8242] [ 280.625161][ T8234] Invalid ELF header magic: != ELF [ 285.383427][ T8303] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 285.458408][ T8303] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0 [ 285.566326][ T8306] vhci_hcd vhci_hcd.2: invalid port number 252 [ 285.590037][ T8285] Process accounting paused [ 285.595898][ T8306] vhci_hcd vhci_hcd.2: default hub control req: 040f v0772 i00fc l2 [ 285.952965][ T8310] ptp ptp0: only physical clock in use now [ 286.879433][ T8317] binder: BINDER_SET_CONTEXT_MGR already set [ 286.907790][ T8317] binder: 8316:8317 ioctl 4018620d 9 returned -16 [ 288.139357][ T8329] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 288.145667][ T8329] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 288.187297][ T8329] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 288.249163][ T8329] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 289.819644][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 290.210940][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 290.217323][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout [ 290.287898][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 291.662138][ T8367] nbd: failed to add new device [ 292.759622][ T8391] FAULT_INJECTION: forcing a failure. [ 292.759622][ T8391] name failslab, interval 1, probability 0, space 0, times 0 [ 292.787787][ T8391] CPU: 0 UID: 8 PID: 8391 Comm: syz.3.458 Tainted: G L syzkaller #0 PREEMPT(full) [ 292.787838][ T8391] Tainted: [L]=SOFTLOCKUP [ 292.787848][ T8391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 292.787865][ T8391] Call Trace: [ 292.787874][ T8391] [ 292.787884][ T8391] dump_stack_lvl+0x100/0x190 [ 292.787928][ T8391] should_fail_ex.cold+0x5/0xa [ 292.787963][ T8391] should_failslab+0xc2/0x120 [ 292.787996][ T8391] __kmalloc_node_track_caller_noprof+0xf9/0x9d0 [ 292.788029][ T8391] ? rcu_is_watching+0x12/0xc0 [ 292.788065][ T8391] ? key_alloc+0x423/0x1310 [ 292.788118][ T8391] ? kmemdup_noprof+0x29/0x60 [ 292.788148][ T8391] kmemdup_noprof+0x29/0x60 [ 292.788182][ T8391] key_alloc+0x423/0x1310 [ 292.788230][ T8391] ? __pfx_key_alloc+0x10/0x10 [ 292.788262][ T8391] ? __pfx_key_default_cmp+0x10/0x10 [ 292.788302][ T8391] ? __pfx_keyring_search_iterator+0x10/0x10 [ 292.788344][ T8391] keyring_alloc+0x44/0xc0 [ 292.788381][ T8391] look_up_user_keyrings+0x465/0x790 [ 292.788438][ T8391] ? __pfx_look_up_user_keyrings+0x10/0x10 [ 292.788483][ T8391] ? futex_wait+0x125/0x380 [ 292.788520][ T8391] ? __pfx_futex_wait+0x10/0x10 [ 292.788565][ T8391] lookup_user_key+0xbb1/0x1300 [ 292.788600][ T8391] ? __pfx_lookup_user_key+0x10/0x10 [ 292.788641][ T8391] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 292.788696][ T8391] ? __x64_sys_futex+0x34f/0x4d0 [ 292.788723][ T8391] ? __x64_sys_futex+0x358/0x4d0 [ 292.788762][ T8391] keyctl_session_to_parent+0x28/0xae0 [ 292.788816][ T8391] __do_sys_keyctl+0x2b1/0x5a0 [ 292.788865][ T8391] do_syscall_64+0x106/0xf80 [ 292.788910][ T8391] ? clear_bhb_loop+0x40/0x90 [ 292.788948][ T8391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.788977][ T8391] RIP: 0033:0x7f62f779bf79 [ 292.789000][ T8391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.789028][ T8391] RSP: 002b:00007f62f59f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 292.789056][ T8391] RAX: ffffffffffffffda RBX: 00007f62f7a16180 RCX: 00007f62f779bf79 [ 292.789076][ T8391] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000012 [ 292.789106][ T8391] RBP: 00007f62f78327e0 R08: 0000000000000001 R09: 0000000000000000 [ 292.789124][ T8391] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 292.789142][ T8391] R13: 00007f62f7a16218 R14: 00007f62f7a16180 R15: 00007fff5d2b2978 [ 292.789186][ T8391] [ 293.050679][ T8393] FAULT_INJECTION: forcing a failure. [ 293.050679][ T8393] name failslab, interval 1, probability 0, space 0, times 0 [ 293.050726][ T8393] CPU: 0 UID: 0 PID: 8393 Comm: syz.2.459 Tainted: G L syzkaller #0 PREEMPT(full) [ 293.050753][ T8393] Tainted: [L]=SOFTLOCKUP [ 293.050760][ T8393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 293.050771][ T8393] Call Trace: [ 293.050778][ T8393] [ 293.050785][ T8393] dump_stack_lvl+0x100/0x190 [ 293.050814][ T8393] should_fail_ex.cold+0x5/0xa [ 293.050834][ T8393] should_failslab+0xc2/0x120 [ 293.050856][ T8393] __kmalloc_node_track_caller_noprof+0xf9/0x9d0 [ 293.050876][ T8393] ? __pfx_vsnprintf+0x10/0x10 [ 293.050901][ T8393] ? __debug_object_init+0x2de/0x3d0 [ 293.050928][ T8393] ? kvasprintf_const+0x66/0x1a0 [ 293.050951][ T8393] ? kvasprintf+0xbc/0x150 [ 293.050969][ T8393] kvasprintf+0xbc/0x150 [ 293.050988][ T8393] ? __pfx_kvasprintf+0x10/0x10 [ 293.051009][ T8393] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 293.051031][ T8393] ? lockdep_init_map_type+0x5c/0x250 [ 293.051055][ T8393] kvasprintf_const+0x66/0x1a0 [ 293.051076][ T8393] kobject_set_name_vargs+0x5a/0x140 [ 293.051100][ T8393] device_create_groups_vargs+0x1b1/0x270 [ 293.051124][ T8393] device_create+0xed/0x130 [ 293.051144][ T8393] ? __pfx_device_create+0x10/0x10 [ 293.051164][ T8393] ? is_console_locked+0x9/0x20 [ 293.051191][ T8393] ? con_is_visible+0x65/0x150 [ 293.051217][ T8393] ? csi_J+0x57e/0xad0 [ 293.051238][ T8393] vcs_make_sysfs+0x32/0x80 [ 293.051266][ T8393] vc_allocate+0x539/0x880 [ 293.051285][ T8393] ? __pfx_vc_allocate+0x10/0x10 [ 293.051310][ T8393] con_install+0xa1/0x620 [ 293.051340][ T8393] ? __pfx_con_install+0x10/0x10 [ 293.051363][ T8393] ? __pfx_con_install+0x10/0x10 [ 293.051382][ T8393] tty_init_dev.part.0+0x9e/0x470 [ 293.051407][ T8393] tty_open+0xa63/0xfa0 [ 293.051433][ T8393] ? __pfx_tty_open+0x10/0x10 [ 293.051453][ T8393] ? chrdev_open+0x589/0x6a0 [ 293.051474][ T8393] ? chrdev_open+0x589/0x6a0 [ 293.051496][ T8393] ? __pfx_tty_open+0x10/0x10 [ 293.051517][ T8393] chrdev_open+0x234/0x6a0 [ 293.051537][ T8393] ? __pfx_chrdev_open+0x10/0x10 [ 293.051557][ T8393] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 293.051582][ T8393] do_dentry_open+0x6d8/0x1660 [ 293.051600][ T8393] ? __pfx_chrdev_open+0x10/0x10 [ 293.051624][ T8393] vfs_open+0x82/0x3f0 [ 293.051650][ T8393] path_openat+0x208c/0x31a0 [ 293.051676][ T8393] ? __pfx_path_openat+0x10/0x10 [ 293.051703][ T8393] do_file_open+0x20e/0x430 [ 293.051724][ T8393] ? __pfx_do_file_open+0x10/0x10 [ 293.051758][ T8393] ? alloc_fd+0x476/0x790 [ 293.051779][ T8393] ? do_getname+0x191/0x390 [ 293.051804][ T8393] do_sys_openat2+0x10d/0x1e0 [ 293.051829][ T8393] ? __pfx_do_sys_openat2+0x10/0x10 [ 293.051861][ T8393] __x64_sys_openat+0x12d/0x210 [ 293.051887][ T8393] ? __pfx___x64_sys_openat+0x10/0x10 [ 293.051910][ T8393] ? xfd_validate_state+0x129/0x190 [ 293.051939][ T8393] do_syscall_64+0x106/0xf80 [ 293.051966][ T8393] ? clear_bhb_loop+0x40/0x90 [ 293.051988][ T8393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.052006][ T8393] RIP: 0033:0x7fc24059bf79 [ 293.052022][ T8393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.052040][ T8393] RSP: 002b:00007fc24136e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 293.052058][ T8393] RAX: ffffffffffffffda RBX: 00007fc240815fa0 RCX: 00007fc24059bf79 [ 293.052070][ T8393] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 293.052084][ T8393] RBP: 00007fc2406327e0 R08: 0000000000000000 R09: 0000000000000000 [ 293.052094][ T8393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.052104][ T8393] R13: 00007fc240816038 R14: 00007fc240815fa0 R15: 00007fffa3a53648 [ 293.052127][ T8393] [ 295.695482][ T8427] page: refcount:22 mapcount:0 mapping:0000000000000000 index:0xffff888078006000 pfn:0x78000 [ 295.729567][ T8427] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 295.793941][ T8427] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 295.837533][ T8427] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 295.886602][ T8427] raw: ffff888078006000 0000000000000000 00000016ffffffff 0000000000000000 [ 295.904561][ T8427] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 295.913689][ T8427] head: ffff888078006000 0000000000000000 00000016ffffffff 0000000000000000 [ 295.934598][ T8427] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 296.007718][ T8427] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 296.118911][ T8427] page dumped because: unmovable page [ 296.129959][ T8427] page_owner tracks the page as allocated [ 296.162238][ T8427] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 5487, tgid 5487 (dhcpcd), ts 64294205889, free_ts 61451342519 [ 296.201928][ T8427] post_alloc_hook+0x1e1/0x250 [ 296.210790][ T8427] get_page_from_freelist+0x111d/0x3140 [ 296.219250][ T8427] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 296.225553][ T8427] alloc_pages_mpol+0x1fb/0x550 [ 296.230729][ T8427] alloc_pages_noprof+0x131/0x390 [ 296.235900][ T8427] skb_page_frag_refill+0x365/0x5b0 [ 296.241591][ T8427] try_fill_recv+0x7f1/0x2950 [ 296.257267][ T8427] virtnet_open+0x5f2/0x960 [ 296.265777][ T8427] __dev_open+0x3ad/0x960 [ 296.270506][ T8427] __dev_change_flags+0x558/0x6f0 [ 296.288313][ T8427] netif_change_flags+0x8d/0x160 [ 296.295270][ T8427] dev_change_flags+0xba/0x250 [ 296.304836][ T8427] devinet_ioctl+0x110b/0x1f10 [ 296.310529][ T8427] inet_ioctl+0x3aa/0x3f0 [ 296.336409][ T8427] sock_do_ioctl+0x118/0x280 [ 296.342711][ T8427] sock_ioctl+0x599/0x6b0 [ 296.351799][ T8427] page last free pid 5489 tgid 5489 stack trace: [ 296.397725][ T8427] __free_frozen_pages+0x822/0x1130 [ 296.403300][ T8427] __put_partials+0x127/0x160 [ 296.410594][ T8427] qlist_free_all+0x47/0xe0 [ 296.416133][ T8427] kasan_quarantine_reduce+0x1a0/0x1f0 [ 296.422486][ T8427] __kasan_slab_alloc+0x69/0x90 [ 296.427967][ T8427] __kmalloc_cache_noprof+0x2e1/0x810 [ 296.433784][ T8427] tomoyo_init_log+0x1a0/0x20c0 [ 296.490084][ T8427] tomoyo_supervisor+0x506/0x1340 [ 296.497808][ T8427] tomoyo_path_number_perm+0x445/0x580 [ 296.503537][ T8427] security_path_chmod+0x121/0x2c0 [ 296.509417][ T8427] chmod_common+0x19a/0x4d0 [ 296.547621][ T8427] do_fchmodat+0x10a/0x1b0 [ 296.552158][ T8427] __x64_sys_chmod+0x5e/0x80 [ 296.559797][ T8427] do_syscall_64+0x106/0xf80 [ 296.564487][ T8427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.149445][ T8458] netlink: 28 bytes leftover after parsing attributes in process `syz.1.470'. [ 297.166553][ T8458] vlan1: entered promiscuous mode [ 297.203149][ T8458] vlan1: entered allmulticast mode [ 297.225569][ T8458] veth0_vlan: entered allmulticast mode [ 297.335828][ T8462] page: refcount:22 mapcount:0 mapping:0000000000000000 index:0xffff888078006000 pfn:0x78000 [ 297.373549][ T8462] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 297.414370][ T8462] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 297.428424][ T8462] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 297.498014][ T8462] raw: ffff888078006000 0000000000000000 00000016ffffffff 0000000000000000 [ 297.506949][ T8462] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 297.560875][ T8462] head: ffff888078006000 0000000000000000 00000016ffffffff 0000000000000000 [ 297.598184][ T8462] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 297.607254][ T8462] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 297.681524][ T8462] page dumped because: unmovable page [ 297.687131][ T8462] page_owner tracks the page as allocated [ 297.756680][ T8462] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 5487, tgid 5487 (dhcpcd), ts 64294205889, free_ts 61451342519 [ 297.756748][ T8462] post_alloc_hook+0x1e1/0x250 [ 297.756796][ T8462] get_page_from_freelist+0x111d/0x3140 [ 297.756843][ T8462] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 297.756891][ T8462] alloc_pages_mpol+0x1fb/0x550 [ 297.756924][ T8462] alloc_pages_noprof+0x131/0x390 [ 297.756957][ T8462] skb_page_frag_refill+0x365/0x5b0 [ 297.756999][ T8462] try_fill_recv+0x7f1/0x2950 [ 297.757041][ T8462] virtnet_open+0x5f2/0x960 [ 297.757092][ T8462] __dev_open+0x3ad/0x960 [ 297.757120][ T8462] __dev_change_flags+0x558/0x6f0 [ 297.757150][ T8462] netif_change_flags+0x8d/0x160 [ 297.757180][ T8462] dev_change_flags+0xba/0x250 [ 297.757216][ T8462] devinet_ioctl+0x110b/0x1f10 [ 297.757251][ T8462] inet_ioctl+0x3aa/0x3f0 [ 297.757286][ T8462] sock_do_ioctl+0x118/0x280 [ 297.757320][ T8462] sock_ioctl+0x599/0x6b0 [ 297.757361][ T8462] page last free pid 5489 tgid 5489 stack trace: [ 297.757379][ T8462] __free_frozen_pages+0x822/0x1130 [ 297.757419][ T8462] __put_partials+0x127/0x160 [ 297.757573][ T8462] qlist_free_all+0x47/0xe0 [ 297.757604][ T8462] kasan_quarantine_reduce+0x1a0/0x1f0 [ 297.757633][ T8462] __kasan_slab_alloc+0x69/0x90 [ 297.757664][ T8462] __kmalloc_cache_noprof+0x2e1/0x810 [ 297.757715][ T8462] tomoyo_init_log+0x1a0/0x20c0 [ 297.757749][ T8462] tomoyo_supervisor+0x506/0x1340 [ 297.757789][ T8462] tomoyo_path_number_perm+0x445/0x580 [ 297.757815][ T8462] security_path_chmod+0x121/0x2c0 [ 297.757857][ T8462] chmod_common+0x19a/0x4d0 [ 297.757891][ T8462] do_fchmodat+0x10a/0x1b0 [ 297.757923][ T8462] __x64_sys_chmod+0x5e/0x80 [ 297.757954][ T8462] do_syscall_64+0x106/0xf80 [ 297.757996][ T8462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.630038][ T8534] page: refcount:22 mapcount:0 mapping:0000000000000000 index:0xffff888078006000 pfn:0x78000 [ 301.689565][ T8534] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 301.743681][ T8534] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 301.797962][ T8534] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 301.830385][ T8534] raw: ffff888078006000 0000000000000000 00000016ffffffff 0000000000000000 [ 301.867582][ T8534] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 301.981610][ T8534] head: ffff888078006000 0000000000000000 00000016ffffffff 0000000000000000 [ 302.077581][ T8534] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 302.139097][ T8534] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 302.156807][ T8534] page dumped because: unmovable page [ 302.166941][ T8534] page_owner tracks the page as allocated [ 302.178937][ T8534] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 5487, tgid 5487 (dhcpcd), ts 64294205889, free_ts 61451342519 [ 302.243630][ T8534] post_alloc_hook+0x1e1/0x250 [ 302.257638][ T8534] get_page_from_freelist+0x111d/0x3140 [ 302.282751][ T8534] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 302.289592][ T8534] alloc_pages_mpol+0x1fb/0x550 [ 302.307915][ T8534] alloc_pages_noprof+0x131/0x390 [ 302.313267][ T8534] skb_page_frag_refill+0x365/0x5b0 [ 302.327585][ T8534] try_fill_recv+0x7f1/0x2950 [ 302.346477][ T8534] virtnet_open+0x5f2/0x960 [ 302.358017][ T8534] __dev_open+0x3ad/0x960 [ 302.365640][ T8534] __dev_change_flags+0x558/0x6f0 [ 302.384291][ T8534] netif_change_flags+0x8d/0x160 [ 302.407558][ T8534] dev_change_flags+0xba/0x250 [ 302.451896][ T8534] devinet_ioctl+0x110b/0x1f10 [ 302.462335][ T8534] inet_ioctl+0x3aa/0x3f0 [ 302.466944][ T8534] sock_do_ioctl+0x118/0x280 [ 302.483721][ T8534] sock_ioctl+0x599/0x6b0 [ 302.501164][ T8534] page last free pid 5489 tgid 5489 stack trace: [ 302.555351][ T8534] __free_frozen_pages+0x822/0x1130 [ 302.575557][ T8534] __put_partials+0x127/0x160 [ 302.585963][ T8534] qlist_free_all+0x47/0xe0 [ 302.596360][ T8534] kasan_quarantine_reduce+0x1a0/0x1f0 [ 302.616713][ T8534] __kasan_slab_alloc+0x69/0x90 [ 302.631124][ T8534] __kmalloc_cache_noprof+0x2e1/0x810 [ 302.642158][ T8534] tomoyo_init_log+0x1a0/0x20c0 [ 302.647904][ T8534] tomoyo_supervisor+0x506/0x1340 [ 302.658077][ T8534] tomoyo_path_number_perm+0x445/0x580 [ 302.693738][ T8534] security_path_chmod+0x121/0x2c0 [ 302.704391][ T8534] chmod_common+0x19a/0x4d0 [ 302.714057][ T8534] do_fchmodat+0x10a/0x1b0 [ 302.726062][ T8534] __x64_sys_chmod+0x5e/0x80 [ 302.737629][ T8534] do_syscall_64+0x106/0xf80 [ 302.765176][ T8534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.375962][ T8583] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 306.330294][ T51] Bluetooth: hci3: unexpected event 0x1d length: 6 > 5 [ 307.656080][ T8594] Process accounting resumed [ 308.403880][ T8617] Process accounting resumed [ 308.678516][ T8642] page: refcount:22 mapcount:0 mapping:0000000000000000 index:0xffff888078006000 pfn:0x78000 [ 308.718188][ T8642] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 308.739639][ T8642] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 308.747260][ T8642] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 308.817594][ T8642] raw: ffff888078006000 0000000000000000 00000016ffffffff 0000000000000000 [ 308.854676][ T8642] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 308.892450][ T8642] head: ffff888078006000 0000000000000000 00000016ffffffff 0000000000000000 [ 308.933178][ T8642] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 308.980352][ T8642] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 309.048187][ T8642] page dumped because: unmovable page [ 309.092285][ T8642] page_owner tracks the page as allocated [ 309.138268][ T8642] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 5487, tgid 5487 (dhcpcd), ts 64294205889, free_ts 61451342519 [ 309.207565][ T8642] post_alloc_hook+0x1e1/0x250 [ 309.227629][ T8642] get_page_from_freelist+0x111d/0x3140 [ 309.242368][ T8642] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 309.277612][ T8642] alloc_pages_mpol+0x1fb/0x550 [ 309.282943][ T8642] alloc_pages_noprof+0x131/0x390 [ 309.288472][ T8642] skb_page_frag_refill+0x365/0x5b0 [ 309.302845][ T8642] try_fill_recv+0x7f1/0x2950 [ 309.356416][ T8642] virtnet_open+0x5f2/0x960 [ 309.393501][ T8642] __dev_open+0x3ad/0x960 [ 309.406046][ T8642] __dev_change_flags+0x558/0x6f0 [ 309.414973][ T8642] netif_change_flags+0x8d/0x160 [ 309.423952][ T8642] dev_change_flags+0xba/0x250 [ 309.431744][ T8642] devinet_ioctl+0x110b/0x1f10 [ 309.439041][ T8642] inet_ioctl+0x3aa/0x3f0 [ 309.451766][ T8642] sock_do_ioctl+0x118/0x280 [ 309.457689][ T8642] sock_ioctl+0x599/0x6b0 [ 309.462396][ T8642] page last free pid 5489 tgid 5489 stack trace: [ 309.470621][ T8642] __free_frozen_pages+0x822/0x1130 [ 309.476194][ T8642] __put_partials+0x127/0x160 [ 309.497733][ T8642] qlist_free_all+0x47/0xe0 [ 309.526730][ T8642] kasan_quarantine_reduce+0x1a0/0x1f0 [ 309.541344][ T8642] __kasan_slab_alloc+0x69/0x90 [ 309.562699][ T8642] __kmalloc_cache_noprof+0x2e1/0x810 [ 309.583443][ T8642] tomoyo_init_log+0x1a0/0x20c0 [ 309.593096][ T8642] tomoyo_supervisor+0x506/0x1340 [ 309.603937][ T8642] tomoyo_path_number_perm+0x445/0x580 [ 309.615217][ T8642] security_path_chmod+0x121/0x2c0 [ 309.631491][ T8642] chmod_common+0x19a/0x4d0 [ 309.638766][ T8642] do_fchmodat+0x10a/0x1b0 [ 309.647977][ T8642] __x64_sys_chmod+0x5e/0x80 [ 309.655736][ T8642] do_syscall_64+0x106/0xf80 [ 309.664723][ T8642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.202405][ T8678] FAULT_INJECTION: forcing a failure. [ 312.202405][ T8678] name failslab, interval 1, probability 0, space 0, times 0 [ 312.268660][ T8678] CPU: 0 UID: 0 PID: 8678 Comm: syz.3.511 Tainted: G L syzkaller #0 PREEMPT(full) [ 312.268693][ T8678] Tainted: [L]=SOFTLOCKUP [ 312.268701][ T8678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 312.268711][ T8678] Call Trace: [ 312.268718][ T8678] [ 312.268726][ T8678] dump_stack_lvl+0x100/0x190 [ 312.268755][ T8678] should_fail_ex.cold+0x5/0xa [ 312.268776][ T8678] should_failslab+0xc2/0x120 [ 312.268799][ T8678] __kmalloc_cache_noprof+0x80/0x810 [ 312.268827][ T8678] ? trace_pid_list_alloc+0x232/0x480 [ 312.268853][ T8678] ? trace_pid_list_alloc+0x232/0x480 [ 312.268874][ T8678] trace_pid_list_alloc+0x232/0x480 [ 312.268897][ T8678] trace_pid_write+0x110/0x480 [ 312.268925][ T8678] ? __pfx_trace_pid_write+0x10/0x10 [ 312.268952][ T8678] ? update_last_data+0xaa/0x510 [ 312.268990][ T8678] event_pid_write.isra.0+0x1e4/0x7f0 [ 312.269015][ T8678] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 312.269052][ T8678] vfs_write+0x2aa/0x1070 [ 312.269070][ T8678] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 312.269096][ T8678] ? __pfx_vfs_write+0x10/0x10 [ 312.269112][ T8678] ? __fget_files+0x215/0x3d0 [ 312.269134][ T8678] ? __fget_files+0x21f/0x3d0 [ 312.269158][ T8678] ksys_write+0x12a/0x250 [ 312.269174][ T8678] ? __pfx_ksys_write+0x10/0x10 [ 312.269190][ T8678] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 312.269212][ T8678] ? syscall_user_dispatch+0x76/0x130 [ 312.269235][ T8678] do_syscall_64+0x106/0xf80 [ 312.269261][ T8678] ? clear_bhb_loop+0x40/0x90 [ 312.269283][ T8678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.269304][ T8678] RIP: 0033:0x7f62f779bf79 [ 312.269323][ T8678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.269344][ T8678] RSP: 002b:00007f62f85ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 312.269362][ T8678] RAX: ffffffffffffffda RBX: 00007f62f7a15fa0 RCX: 00007f62f779bf79 [ 312.269374][ T8678] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 312.269385][ T8678] RBP: 00007f62f78327e0 R08: 0000000000000000 R09: 0000000000000000 [ 312.269395][ T8678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.269406][ T8678] R13: 00007f62f7a16038 R14: 00007f62f7a15fa0 R15: 00007fff5d2b2978 [ 312.269431][ T8678] [ 315.932292][ T8701] Process accounting resumed [ 316.054619][ T29] audit: type=1800 audit(1770771155.241:5): pid=8710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.516" name="features" dev="configfs" ino=26367 res=0 errno=0 [ 316.519897][ T8729] netlink: 28 bytes leftover after parsing attributes in process `syz.3.518'. [ 316.529510][ T8729] vlan1: entered promiscuous mode [ 316.535019][ T8729] vlan1: entered allmulticast mode [ 316.551853][ T8729] veth0_vlan: entered allmulticast mode [ 316.984339][ T8741] FAULT_INJECTION: forcing a failure. [ 316.984339][ T8741] name failslab, interval 1, probability 0, space 0, times 0 [ 317.017699][ T8741] CPU: 0 UID: 0 PID: 8741 Comm: syz.3.519 Tainted: G L syzkaller #0 PREEMPT(full) [ 317.017753][ T8741] Tainted: [L]=SOFTLOCKUP [ 317.017764][ T8741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 317.017780][ T8741] Call Trace: [ 317.017788][ T8741] [ 317.017797][ T8741] dump_stack_lvl+0x100/0x190 [ 317.017841][ T8741] should_fail_ex.cold+0x5/0xa [ 317.017877][ T8741] should_failslab+0xc2/0x120 [ 317.017913][ T8741] __kmalloc_cache_noprof+0x80/0x810 [ 317.017968][ T8741] ? vidtv_psi_network_name_desc_init+0x68/0x310 [ 317.018017][ T8741] ? vidtv_psi_network_name_desc_init+0x68/0x310 [ 317.018053][ T8741] vidtv_psi_network_name_desc_init+0x68/0x310 [ 317.018095][ T8741] vidtv_psi_nit_table_init+0x291/0x5f0 [ 317.018132][ T8741] ? kasan_save_track+0x14/0x30 [ 317.018165][ T8741] vidtv_channel_si_init+0xcd0/0x18d0 [ 317.018218][ T8741] vidtv_mux_init+0x526/0xbf0 [ 317.018265][ T8741] vidtv_start_feed+0x33e/0x4c0 [ 317.018299][ T8741] ? __pfx_vidtv_start_feed+0x10/0x10 [ 317.018334][ T8741] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 317.018375][ T8741] ? mark_held_locks+0x40/0x70 [ 317.018410][ T8741] ? __pfx_vidtv_start_feed+0x10/0x10 [ 317.018442][ T8741] dmx_ts_feed_start_filtering+0xf6/0x220 [ 317.018484][ T8741] dvb_dmxdev_start_feed+0x273/0x3f0 [ 317.018521][ T8741] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 317.018558][ T8741] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 317.018594][ T8741] dvb_demux_do_ioctl+0xe64/0x1200 [ 317.018640][ T8741] dvb_usercopy+0x167/0x340 [ 317.018666][ T8741] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 317.018700][ T8741] ? __pfx_dvb_usercopy+0x10/0x10 [ 317.018740][ T8741] ? __fget_files+0x21f/0x3d0 [ 317.018774][ T8741] dvb_demux_ioctl+0x29/0x40 [ 317.018794][ T8741] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 317.018821][ T8741] __x64_sys_ioctl+0x18e/0x210 [ 317.018864][ T8741] do_syscall_64+0x106/0xf80 [ 317.018907][ T8741] ? clear_bhb_loop+0x40/0x90 [ 317.018942][ T8741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.019076][ T8741] RIP: 0033:0x7f62f779bf79 [ 317.019103][ T8741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.019133][ T8741] RSP: 002b:00007f62f858d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 317.019164][ T8741] RAX: ffffffffffffffda RBX: 00007f62f7a16090 RCX: 00007f62f779bf79 [ 317.019184][ T8741] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000002 [ 317.019201][ T8741] RBP: 00007f62f78327e0 R08: 0000000000000000 R09: 0000000000000000 [ 317.019215][ T8741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.019229][ T8741] R13: 00007f62f7a16128 R14: 00007f62f7a16090 R15: 00007fff5d2b2978 [ 317.019265][ T8741] [ 317.570670][ T8745] page: refcount:22 mapcount:0 mapping:0000000000000000 index:0xffff888078006000 pfn:0x78000 [ 317.637109][ T8745] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 317.661347][ T8745] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 317.680819][ T8752] FAULT_INJECTION: forcing a failure. [ 317.680819][ T8752] name failslab, interval 1, probability 0, space 0, times 0 [ 317.681326][ T8745] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 317.742013][ T8752] CPU: 1 UID: 0 PID: 8752 Comm: syz.3.524 Tainted: G L syzkaller #0 PREEMPT(full) [ 317.742061][ T8752] Tainted: [L]=SOFTLOCKUP [ 317.742071][ T8752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 317.742089][ T8752] Call Trace: [ 317.742099][ T8752] [ 317.742112][ T8752] dump_stack_lvl+0x100/0x190 [ 317.742162][ T8752] should_fail_ex.cold+0x5/0xa [ 317.742209][ T8752] should_failslab+0xc2/0x120 [ 317.742245][ T8752] ? __netlink_kernel_create+0x181/0x750 [ 317.742278][ T8752] __kmalloc_noprof+0xf6/0x9c0 [ 317.742322][ T8752] ? __init_waitqueue_head+0xca/0x150 [ 317.742371][ T8752] ? __netlink_kernel_create+0x181/0x750 [ 317.742406][ T8752] __netlink_kernel_create+0x181/0x750 [ 317.742446][ T8752] ? __pfx___netlink_kernel_create+0x10/0x10 [ 317.742495][ T8752] rtnetlink_net_init+0xb9/0x140 [ 317.742526][ T8752] ? __pfx_rtnetlink_net_init+0x10/0x10 [ 317.742555][ T8752] ? lockdep_init_map_type+0x5c/0x250 [ 317.742588][ T8752] ? __pfx_rtnetlink_rcv+0x10/0x10 [ 317.742614][ T8752] ? __pfx_rtnetlink_bind+0x10/0x10 [ 317.742646][ T8752] ? mutex_init_lockep+0x110/0x150 [ 317.742684][ T8752] ? __pfx_rtnetlink_net_init+0x10/0x10 [ 317.742712][ T8752] ops_init+0x1e2/0x5f0 [ 317.742753][ T8752] setup_net+0x118/0x3a0 [ 317.742790][ T8752] ? __pfx_setup_net+0x10/0x10 [ 317.742824][ T8752] ? lockdep_init_map_type+0x5c/0x250 [ 317.742857][ T8752] ? mutex_init_lockep+0x110/0x150 [ 317.742895][ T8752] copy_net_ns+0x46f/0x7c0 [ 317.742938][ T8752] create_new_namespaces+0x3ea/0xac0 [ 317.742997][ T8752] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 317.743046][ T8752] ksys_unshare+0x455/0xab0 [ 317.743082][ T8752] ? __pfx_ksys_unshare+0x10/0x10 [ 317.743114][ T8752] ? xfd_validate_state+0x129/0x190 [ 317.743165][ T8752] __x64_sys_unshare+0x31/0x40 [ 317.743205][ T8752] do_syscall_64+0x106/0xf80 [ 317.743250][ T8752] ? clear_bhb_loop+0x40/0x90 [ 317.743290][ T8752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.743321][ T8752] RIP: 0033:0x7f62f779bf79 [ 317.743349][ T8752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.743378][ T8752] RSP: 002b:00007f62f85ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 317.743409][ T8752] RAX: ffffffffffffffda RBX: 00007f62f7a15fa0 RCX: 00007f62f779bf79 [ 317.743430][ T8752] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 317.743448][ T8752] RBP: 00007f62f78327e0 R08: 0000000000000000 R09: 0000000000000000 [ 317.743467][ T8752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.743484][ T8752] R13: 00007f62f7a16038 R14: 00007f62f7a15fa0 R15: 00007fff5d2b2978 [ 317.743527][ T8752] [ 318.371791][ T8745] raw: ffff888078006000 0000000000000000 00000016ffffffff 0000000000000000 [ 318.447633][ T8745] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 318.529862][ T8745] head: ffff888078006000 0000000000000000 00000016ffffffff 0000000000000000 [ 318.599134][ T8745] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 318.633123][ T8745] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 318.652398][ T8745] page dumped because: unmovable page [ 318.668067][ T8745] page_owner tracks the page as allocated [ 318.707604][ T8745] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 5487, tgid 5487 (dhcpcd), ts 64294205889, free_ts 61451342519 [ 318.844467][ T8745] post_alloc_hook+0x1e1/0x250 [ 318.853193][ T8745] get_page_from_freelist+0x111d/0x3140 [ 318.867478][ T8745] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 318.883791][ T8745] alloc_pages_mpol+0x1fb/0x550 [ 318.893578][ T8745] alloc_pages_noprof+0x131/0x390 [ 318.899513][ T8745] skb_page_frag_refill+0x365/0x5b0 [ 318.904860][ T8745] try_fill_recv+0x7f1/0x2950 [ 318.909866][ T8745] virtnet_open+0x5f2/0x960 [ 318.914446][ T8745] __dev_open+0x3ad/0x960 [ 318.929106][ T8745] __dev_change_flags+0x558/0x6f0 [ 318.934423][ T8745] netif_change_flags+0x8d/0x160 [ 318.949988][ T8745] dev_change_flags+0xba/0x250 [ 318.954849][ T8745] devinet_ioctl+0x110b/0x1f10 [ 318.976459][ T8745] inet_ioctl+0x3aa/0x3f0 [ 318.987497][ T8745] sock_do_ioctl+0x118/0x280 [ 318.992412][ T8745] sock_ioctl+0x599/0x6b0 [ 319.002570][ T8745] page last free pid 5489 tgid 5489 stack trace: [ 319.012721][ T8745] __free_frozen_pages+0x822/0x1130 [ 319.025461][ T8745] __put_partials+0x127/0x160 [ 319.047513][ T8745] qlist_free_all+0x47/0xe0 [ 319.053845][ T8745] kasan_quarantine_reduce+0x1a0/0x1f0 [ 319.067532][ T8745] __kasan_slab_alloc+0x69/0x90 [ 319.072636][ T8745] __kmalloc_cache_noprof+0x2e1/0x810 [ 319.079304][ T8745] tomoyo_init_log+0x1a0/0x20c0 [ 319.089613][ T8745] tomoyo_supervisor+0x506/0x1340 [ 319.097784][ T8745] tomoyo_path_number_perm+0x445/0x580 [ 319.103523][ T8745] security_path_chmod+0x121/0x2c0 [ 319.117511][ T8745] chmod_common+0x19a/0x4d0 [ 319.122458][ T8745] do_fchmodat+0x10a/0x1b0 [ 319.130089][ T8745] __x64_sys_chmod+0x5e/0x80 [ 319.142301][ T8745] do_syscall_64+0x106/0xf80 [ 319.148785][ T8745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.560399][ T8777] FAULT_INJECTION: forcing a failure. [ 319.560399][ T8777] name failslab, interval 1, probability 0, space 0, times 0 [ 319.577558][ T8777] CPU: 0 UID: 0 PID: 8777 Comm: syz.2.527 Tainted: G L syzkaller #0 PREEMPT(full) [ 319.577610][ T8777] Tainted: [L]=SOFTLOCKUP [ 319.577620][ T8777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 319.577637][ T8777] Call Trace: [ 319.577648][ T8777] [ 319.577659][ T8777] dump_stack_lvl+0x100/0x190 [ 319.577706][ T8777] should_fail_ex.cold+0x5/0xa [ 319.577740][ T8777] should_failslab+0xc2/0x120 [ 319.577772][ T8777] __kmalloc_cache_noprof+0x80/0x810 [ 319.577816][ T8777] ? trace_pid_list_alloc+0x232/0x480 [ 319.577854][ T8777] ? trace_pid_list_alloc+0x232/0x480 [ 319.577888][ T8777] trace_pid_list_alloc+0x232/0x480 [ 319.577928][ T8777] trace_pid_write+0x110/0x480 [ 319.577976][ T8777] ? __pfx_trace_pid_write+0x10/0x10 [ 319.578024][ T8777] ? update_last_data+0xaa/0x510 [ 319.578092][ T8777] event_pid_write.isra.0+0x1e4/0x7f0 [ 319.578135][ T8777] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 319.578198][ T8777] vfs_write+0x2aa/0x1070 [ 319.578229][ T8777] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 319.578272][ T8777] ? __pfx_vfs_write+0x10/0x10 [ 319.578301][ T8777] ? __fget_files+0x215/0x3d0 [ 319.578351][ T8777] ? __fget_files+0x21f/0x3d0 [ 319.578394][ T8777] ksys_write+0x12a/0x250 [ 319.578423][ T8777] ? __pfx_ksys_write+0x10/0x10 [ 319.578450][ T8777] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 319.578489][ T8777] ? syscall_user_dispatch+0x76/0x130 [ 319.578530][ T8777] do_syscall_64+0x106/0xf80 [ 319.578575][ T8777] ? clear_bhb_loop+0x40/0x90 [ 319.578634][ T8777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.578665][ T8777] RIP: 0033:0x7fc24059bf79 [ 319.578690][ T8777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.578720][ T8777] RSP: 002b:00007fc24136e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 319.578749][ T8777] RAX: ffffffffffffffda RBX: 00007fc240815fa0 RCX: 00007fc24059bf79 [ 319.578769][ T8777] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 319.578788][ T8777] RBP: 00007fc2406327e0 R08: 0000000000000000 R09: 0000000000000000 [ 319.578813][ T8777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.578831][ T8777] R13: 00007fc240816038 R14: 00007fc240815fa0 R15: 00007fffa3a53648 [ 319.578877][ T8777] [ 321.682001][ T8821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.533'. [ 321.948818][ T8817] netlink: 330 bytes leftover after parsing attributes in process `syz.3.533'. [ 322.616990][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.623693][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.278484][ T8837] [U] ^\ [ 323.403807][ T8841] page: refcount:22 mapcount:0 mapping:0000000000000000 index:0xffff888078006000 pfn:0x78000 [ 323.439190][ T8841] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 323.567484][ T8841] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 323.575292][ T8841] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 323.723447][ T8841] raw: ffff888078006000 0000000000000000 00000016ffffffff 0000000000000000 [ 323.787560][ T8841] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 323.858341][ T8841] head: ffff888078006000 0000000000000000 00000016ffffffff 0000000000000000 [ 323.867321][ T8841] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 323.937503][ T8841] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 323.970205][ T8841] page dumped because: unmovable page [ 323.987546][ T8841] page_owner tracks the page as allocated [ 324.015984][ T8841] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 5487, tgid 5487 (dhcpcd), ts 64294205889, free_ts 61451342519 [ 324.078327][ T8841] post_alloc_hook+0x1e1/0x250 [ 324.083171][ T8841] get_page_from_freelist+0x111d/0x3140 [ 324.105353][ T8841] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 324.113877][ T8841] alloc_pages_mpol+0x1fb/0x550 [ 324.119134][ T8841] alloc_pages_noprof+0x131/0x390 [ 324.124246][ T8841] skb_page_frag_refill+0x365/0x5b0 [ 324.137933][ T8841] try_fill_recv+0x7f1/0x2950 [ 324.147542][ T8841] virtnet_open+0x5f2/0x960 [ 324.156211][ T8841] __dev_open+0x3ad/0x960 [ 324.161018][ T8841] __dev_change_flags+0x558/0x6f0 [ 324.166184][ T8841] netif_change_flags+0x8d/0x160 [ 324.177602][ T8841] dev_change_flags+0xba/0x250 [ 324.182676][ T8841] devinet_ioctl+0x110b/0x1f10 [ 324.202202][ T8841] inet_ioctl+0x3aa/0x3f0 [ 324.217047][ T8841] sock_do_ioctl+0x118/0x280 [ 324.237485][ T8841] sock_ioctl+0x599/0x6b0 [ 324.242128][ T8841] page last free pid 5489 tgid 5489 stack trace: [ 324.250651][ T8841] __free_frozen_pages+0x822/0x1130 [ 324.256032][ T8841] __put_partials+0x127/0x160 [ 324.366754][ T8841] qlist_free_all+0x47/0xe0 [ 324.387046][ T8841] kasan_quarantine_reduce+0x1a0/0x1f0 [ 324.403031][ T8841] __kasan_slab_alloc+0x69/0x90 [ 324.417508][ T8841] __kmalloc_cache_noprof+0x2e1/0x810 [ 324.423134][ T8841] tomoyo_init_log+0x1a0/0x20c0 [ 324.443845][ T8841] tomoyo_supervisor+0x506/0x1340 [ 324.464166][ T8841] tomoyo_path_number_perm+0x445/0x580 [ 324.479392][ T8841] security_path_chmod+0x121/0x2c0 [ 324.494979][ T8841] chmod_common+0x19a/0x4d0 [ 324.505153][ T8841] do_fchmodat+0x10a/0x1b0 [ 324.512083][ T8841] __x64_sys_chmod+0x5e/0x80 [ 324.525630][ T8841] do_syscall_64+0x106/0xf80 [ 324.537495][ T8841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.567338][ T8862] [U] ^@ [ 329.237896][ T8893] FAULT_INJECTION: forcing a failure. [ 329.237896][ T8893] name failslab, interval 1, probability 0, space 0, times 0 [ 329.274957][ T8893] CPU: 1 UID: 0 PID: 8893 Comm: syz.2.546 Tainted: G L syzkaller #0 PREEMPT(full) [ 329.275005][ T8893] Tainted: [L]=SOFTLOCKUP [ 329.275016][ T8893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 329.275031][ T8893] Call Trace: [ 329.275042][ T8893] [ 329.275052][ T8893] dump_stack_lvl+0x100/0x190 [ 329.275098][ T8893] should_fail_ex.cold+0x5/0xa [ 329.275129][ T8893] should_failslab+0xc2/0x120 [ 329.275160][ T8893] kmem_cache_alloc_noprof+0x83/0x780 [ 329.275188][ T8893] ? radix_tree_node_alloc.constprop.0+0x66/0x340 [ 329.275221][ T8893] ? radix_tree_node_alloc.constprop.0+0x66/0x340 [ 329.275263][ T8893] ? radix_tree_node_alloc.constprop.0+0x66/0x340 [ 329.275298][ T8893] radix_tree_node_alloc.constprop.0+0x66/0x340 [ 329.275339][ T8893] idr_get_free+0x52e/0xa00 [ 329.275388][ T8893] idr_alloc_u32+0x1ac/0x320 [ 329.275428][ T8893] ? __pfx_idr_alloc_u32+0x10/0x10 [ 329.275471][ T8893] ? __pfx___debug_object_init+0x10/0x10 [ 329.275525][ T8893] idr_alloc+0xc0/0x130 [ 329.275564][ T8893] ? __pfx_idr_alloc+0x10/0x10 [ 329.275603][ T8893] ? lockdep_init_map_type+0x5c/0x250 [ 329.275640][ T8893] loop_add+0x1fe/0xb60 [ 329.275676][ T8893] ? __pfx_loop_add+0x10/0x10 [ 329.275732][ T8893] ? find_held_lock+0x2b/0x80 [ 329.275765][ T8893] ? __fget_files+0x215/0x3d0 [ 329.275796][ T8893] loop_control_ioctl+0xae/0x620 [ 329.275830][ T8893] ? __pfx_loop_control_ioctl+0x10/0x10 [ 329.275868][ T8893] ? __pfx_loop_control_ioctl+0x10/0x10 [ 329.275918][ T8893] __x64_sys_ioctl+0x18e/0x210 [ 329.275962][ T8893] do_syscall_64+0x106/0xf80 [ 329.276009][ T8893] ? clear_bhb_loop+0x40/0x90 [ 329.276044][ T8893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.276073][ T8893] RIP: 0033:0x7fc24059bf79 [ 329.276098][ T8893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.276126][ T8893] RSP: 002b:00007fc23e7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 329.276155][ T8893] RAX: ffffffffffffffda RBX: 00007fc240816090 RCX: 00007fc24059bf79 [ 329.276173][ T8893] RDX: 000000000000028e RSI: 0000000000004c80 RDI: 0000000000000007 [ 329.276191][ T8893] RBP: 00007fc2406327e0 R08: 0000000000000000 R09: 0000000000000000 [ 329.276208][ T8893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 329.276225][ T8893] R13: 00007fc240816128 R14: 00007fc240816090 R15: 00007fffa3a53648 [ 329.276265][ T8893] [ 330.345112][ T8910] HfR: entered promiscuous mode [ 330.430495][ T8913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.549'. [ 330.755619][ T8913] HfR: left promiscuous mode [ 331.179048][ T8921] netlink: 50 bytes leftover after parsing attributes in process `syz.0.551'. [ 333.969512][ T8961] FAULT_INJECTION: forcing a failure. [ 333.969512][ T8961] name failslab, interval 1, probability 0, space 0, times 0 [ 333.984850][ T8961] CPU: 1 UID: 0 PID: 8961 Comm: syz.0.559 Tainted: G L syzkaller #0 PREEMPT(full) [ 333.984893][ T8961] Tainted: [L]=SOFTLOCKUP [ 333.984904][ T8961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 333.984920][ T8961] Call Trace: [ 333.984929][ T8961] [ 333.984940][ T8961] dump_stack_lvl+0x100/0x190 [ 333.984987][ T8961] should_fail_ex.cold+0x5/0xa [ 333.985019][ T8961] should_failslab+0xc2/0x120 [ 333.985054][ T8961] kmem_cache_alloc_node_noprof+0x8c/0x880 [ 333.985098][ T8961] ? alloc_vmap_area+0x1840/0x2a00 [ 333.985130][ T8961] ? __pfx___might_resched+0x10/0x10 [ 333.985165][ T8961] ? alloc_vmap_area+0x1840/0x2a00 [ 333.985193][ T8961] alloc_vmap_area+0x1840/0x2a00 [ 333.985240][ T8961] ? __pfx_alloc_vmap_area+0x10/0x10 [ 333.985284][ T8961] __get_vm_area_node+0x1ca/0x330 [ 333.985327][ T8961] __vmalloc_node_range_noprof+0x213/0x1530 [ 333.985365][ T8961] ? kernel_clone+0xfc/0x930 [ 333.985398][ T8961] ? kernel_clone+0xfc/0x930 [ 333.985420][ T8961] ? rcu_read_unlock+0x17/0x60 [ 333.985452][ T8961] ? rcu_read_unlock+0x17/0x60 [ 333.985487][ T8961] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 333.985526][ T8961] ? __memcg_slab_post_alloc_hook+0x473/0x880 [ 333.985570][ T8961] ? rcu_is_watching+0x12/0xc0 [ 333.985602][ T8961] ? trace_kmem_cache_alloc+0x80/0xb0 [ 333.985633][ T8961] ? kernel_clone+0xfc/0x930 [ 333.985655][ T8961] __vmalloc_node_noprof+0xad/0xf0 [ 333.985691][ T8961] ? kernel_clone+0xfc/0x930 [ 333.985718][ T8961] copy_process+0x5ec/0x79b0 [ 333.985746][ T8961] ? __pfx___futex_wait+0x10/0x10 [ 333.985791][ T8961] ? __pfx_copy_process+0x10/0x10 [ 333.985836][ T8961] kernel_clone+0xfc/0x930 [ 333.985859][ T8961] ? __pfx_futex_wait+0x10/0x10 [ 333.985891][ T8961] ? __pfx_kernel_clone+0x10/0x10 [ 333.985964][ T8961] __do_sys_clone+0xd9/0x120 [ 333.985994][ T8961] ? __pfx___do_sys_clone+0x10/0x10 [ 333.986023][ T8961] ? __fget_files+0x21f/0x3d0 [ 333.986066][ T8961] ? xfd_validate_state+0x129/0x190 [ 333.986123][ T8961] do_syscall_64+0x106/0xf80 [ 333.986168][ T8961] ? clear_bhb_loop+0x40/0x90 [ 333.986205][ T8961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.986234][ T8961] RIP: 0033:0x7f76df59bf79 [ 333.986259][ T8961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.986288][ T8961] RSP: 002b:00007f76dd7ccfd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 333.986317][ T8961] RAX: ffffffffffffffda RBX: 00007f76df816090 RCX: 00007f76df59bf79 [ 333.986337][ T8961] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 333.986363][ T8961] RBP: 00007f76df6327e0 R08: 0000000000000000 R09: 0000000000000000 [ 333.986381][ T8961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.986399][ T8961] R13: 00007f76df816128 R14: 00007f76df816090 R15: 00007ffc90dbc8a8 [ 333.986445][ T8961] [ 334.725627][ T8966] page: refcount:22 mapcount:0 mapping:0000000000000000 index:0xffff888078006000 pfn:0x78000 [ 334.852475][ T8966] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 334.877935][ T8966] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 334.885628][ T8966] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 335.042539][ T8966] raw: ffff888078006000 0000000000000000 00000016ffffffff 0000000000000000 [ 335.209720][ T8966] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 335.328188][ T8966] head: ffff888078006000 0000000000000000 00000016ffffffff 0000000000000000 [ 335.382841][ T8966] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 335.512165][ T8966] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 335.590564][ T8966] page dumped because: unmovable page [ 335.623960][ T8966] page_owner tracks the page as allocated [ 335.658663][ T8966] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 5487, tgid 5487 (dhcpcd), ts 64294205889, free_ts 61451342519 [ 335.787255][ T8966] post_alloc_hook+0x1e1/0x250 [ 335.799718][ T8966] get_page_from_freelist+0x111d/0x3140 [ 335.828787][ T8966] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 335.834796][ T8966] alloc_pages_mpol+0x1fb/0x550 [ 335.867277][ T8966] alloc_pages_noprof+0x131/0x390 [ 335.917571][ T8966] skb_page_frag_refill+0x365/0x5b0 [ 335.933805][ T8966] try_fill_recv+0x7f1/0x2950 [ 335.958137][ T8966] virtnet_open+0x5f2/0x960 [ 335.962757][ T8966] __dev_open+0x3ad/0x960 [ 335.999142][ T8966] __dev_change_flags+0x558/0x6f0 [ 336.009842][ T8966] netif_change_flags+0x8d/0x160 [ 336.014860][ T8966] dev_change_flags+0xba/0x250 [ 336.038911][ T8966] devinet_ioctl+0x110b/0x1f10 [ 336.044265][ T8966] inet_ioctl+0x3aa/0x3f0 [ 336.078808][ T8966] sock_do_ioctl+0x118/0x280 [ 336.083598][ T8966] sock_ioctl+0x599/0x6b0 [ 336.117317][ T8966] page last free pid 5489 tgid 5489 stack trace: [ 336.154391][ T8966] __free_frozen_pages+0x822/0x1130 [ 336.169221][ T8966] __put_partials+0x127/0x160 [ 336.193699][ T8966] qlist_free_all+0x47/0xe0 [ 336.212258][ T8966] kasan_quarantine_reduce+0x1a0/0x1f0 [ 336.227508][ T8966] __kasan_slab_alloc+0x69/0x90 [ 336.232599][ T8966] __kmalloc_cache_noprof+0x2e1/0x810 [ 336.247484][ T8966] tomoyo_init_log+0x1a0/0x20c0 [ 336.252826][ T8966] tomoyo_supervisor+0x506/0x1340 [ 336.267505][ T8966] tomoyo_path_number_perm+0x445/0x580 [ 336.273145][ T8966] security_path_chmod+0x121/0x2c0 [ 336.288076][ T8966] chmod_common+0x19a/0x4d0 [ 336.292753][ T8966] do_fchmodat+0x10a/0x1b0 [ 336.297338][ T8966] __x64_sys_chmod+0x5e/0x80 [ 336.327496][ T8966] do_syscall_64+0x106/0xf80 [ 336.334835][ T8966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.727341][ T8992] Process accounting paused [ 338.002432][ T29] audit: type=1800 audit(1770771177.081:6): pid=9007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.574" name="dbroot" dev="configfs" ino=28133 res=0 errno=0 [ 339.217141][ T9007] Process accounting paused [ 340.649111][ T9045] Lens A: ================= START STATUS ================= [ 340.680819][ T9045] Lens A: Focus, Absolute: 0 [ 340.685867][ T9045] Lens A: ================== END STATUS ================== [ 341.814335][ T9063] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 344.983038][ T9128] FAULT_INJECTION: forcing a failure. [ 344.983038][ T9128] name failslab, interval 1, probability 0, space 0, times 0 [ 345.006720][ T9128] CPU: 1 UID: 0 PID: 9128 Comm: syz.0.591 Tainted: G L syzkaller #0 PREEMPT(full) [ 345.006767][ T9128] Tainted: [L]=SOFTLOCKUP [ 345.006777][ T9128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 345.006792][ T9128] Call Trace: [ 345.006802][ T9128] [ 345.006813][ T9128] dump_stack_lvl+0x100/0x190 [ 345.006856][ T9128] should_fail_ex.cold+0x5/0xa [ 345.006886][ T9128] should_failslab+0xc2/0x120 [ 345.006917][ T9128] ? __netlink_kernel_create+0x181/0x750 [ 345.006948][ T9128] __kmalloc_noprof+0xf6/0x9c0 [ 345.006984][ T9128] ? __init_waitqueue_head+0xca/0x150 [ 345.007027][ T9128] ? __netlink_kernel_create+0x181/0x750 [ 345.007056][ T9128] __netlink_kernel_create+0x181/0x750 [ 345.007090][ T9128] ? __pfx___netlink_kernel_create+0x10/0x10 [ 345.007134][ T9128] rtnetlink_net_init+0xb9/0x140 [ 345.007161][ T9128] ? __pfx_rtnetlink_net_init+0x10/0x10 [ 345.007187][ T9128] ? lockdep_init_map_type+0x5c/0x250 [ 345.007215][ T9128] ? __pfx_rtnetlink_rcv+0x10/0x10 [ 345.007240][ T9128] ? __pfx_rtnetlink_bind+0x10/0x10 [ 345.007267][ T9128] ? mutex_init_lockep+0x110/0x150 [ 345.007300][ T9128] ? __pfx_rtnetlink_net_init+0x10/0x10 [ 345.007324][ T9128] ops_init+0x1e2/0x5f0 [ 345.007360][ T9128] setup_net+0x118/0x3a0 [ 345.007392][ T9128] ? __pfx_setup_net+0x10/0x10 [ 345.007428][ T9128] ? lockdep_init_map_type+0x5c/0x250 [ 345.007458][ T9128] ? mutex_init_lockep+0x110/0x150 [ 345.007491][ T9128] copy_net_ns+0x46f/0x7c0 [ 345.007529][ T9128] create_new_namespaces+0x3ea/0xac0 [ 345.007576][ T9128] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 345.007619][ T9128] ksys_unshare+0x455/0xab0 [ 345.007650][ T9128] ? __pfx_ksys_unshare+0x10/0x10 [ 345.007679][ T9128] ? xfd_validate_state+0x129/0x190 [ 345.007737][ T9128] __x64_sys_unshare+0x31/0x40 [ 345.007767][ T9128] do_syscall_64+0x106/0xf80 [ 345.007812][ T9128] ? clear_bhb_loop+0x40/0x90 [ 345.007847][ T9128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.007877][ T9128] RIP: 0033:0x7f76df59bf79 [ 345.007902][ T9128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.007928][ T9128] RSP: 002b:00007f76dd7ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 345.007955][ T9128] RAX: ffffffffffffffda RBX: 00007f76df815fa0 RCX: 00007f76df59bf79 [ 345.007976][ T9128] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 345.007992][ T9128] RBP: 00007f76df6327e0 R08: 0000000000000000 R09: 0000000000000000 [ 345.008009][ T9128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.008024][ T9128] R13: 00007f76df816038 R14: 00007f76df815fa0 R15: 00007ffc90dbc8a8 [ 345.008061][ T9128] [ 346.065204][ T9121] Process accounting paused [ 349.233206][ T9200] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 351.719731][ T9239] usb usb3: usbfs: interface 0 claimed by hub while 'syz.3.609' sets config #-1 [ 354.612544][ T9285] loop10: detected capacity change from 0 to 8192 [ 354.772633][ T9284] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 354.828699][ T9284] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 354.836241][ T9284] vhci_hcd vhci_hcd.1: invalid port number 50 [ 354.919005][ T9284] vhci_hcd vhci_hcd.1: default hub control req: 0400 v0000 i0032 l0 [ 356.017899][ T9298] page: refcount:22 mapcount:0 mapping:0000000000000000 index:0xffff888078006000 pfn:0x78000 [ 356.160002][ T9298] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 356.185790][ T9298] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 356.212517][ T9298] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 356.297890][ T9298] raw: ffff888078006000 0000000000000000 00000016ffffffff 0000000000000000 [ 356.322511][ T9298] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 356.352127][ T9298] head: ffff888078006000 0000000000000000 00000016ffffffff 0000000000000000 [ 356.405585][ T9298] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 356.453941][ T9298] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 356.501090][ T9298] page dumped because: unmovable page [ 356.537073][ T9298] page_owner tracks the page as allocated [ 356.586098][ T9298] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 5487, tgid 5487 (dhcpcd), ts 64294205889, free_ts 61451342519 [ 356.667914][ T9298] post_alloc_hook+0x1e1/0x250 [ 356.687695][ T9298] get_page_from_freelist+0x111d/0x3140 [ 356.701077][ T9298] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 356.741978][ T9298] alloc_pages_mpol+0x1fb/0x550 [ 356.751012][ T9298] alloc_pages_noprof+0x131/0x390 [ 356.756158][ T9298] skb_page_frag_refill+0x365/0x5b0 [ 356.795681][ T9298] try_fill_recv+0x7f1/0x2950 [ 356.832819][ T9298] virtnet_open+0x5f2/0x960 [ 356.840641][ T9303] binder: 9302:9303 ioctl c018620c 0 returned -1 [ 356.854844][ T9298] __dev_open+0x3ad/0x960 [ 356.877560][ T9298] __dev_change_flags+0x558/0x6f0 [ 356.905393][ T9298] netif_change_flags+0x8d/0x160 [ 356.959427][ T9298] dev_change_flags+0xba/0x250 [ 357.023275][ T9298] devinet_ioctl+0x110b/0x1f10 [ 357.033730][ T9298] inet_ioctl+0x3aa/0x3f0 [ 357.071443][ T9298] sock_do_ioctl+0x118/0x280 [ 357.090341][ T9298] sock_ioctl+0x599/0x6b0 [ 357.140480][ T9298] page last free pid 5489 tgid 5489 stack trace: [ 357.207688][ T9298] __free_frozen_pages+0x822/0x1130 [ 357.213727][ T9298] __put_partials+0x127/0x160 [ 357.229693][ T9298] qlist_free_all+0x47/0xe0 [ 357.323497][ T9298] kasan_quarantine_reduce+0x1a0/0x1f0 [ 357.370259][ T9298] __kasan_slab_alloc+0x69/0x90 [ 357.420832][ T9298] __kmalloc_cache_noprof+0x2e1/0x810 [ 357.457532][ T9298] tomoyo_init_log+0x1a0/0x20c0 [ 357.467587][ T9298] tomoyo_supervisor+0x506/0x1340 [ 357.473092][ T9298] tomoyo_path_number_perm+0x445/0x580 [ 357.485302][ T9298] security_path_chmod+0x121/0x2c0 [ 357.491722][ T9298] chmod_common+0x19a/0x4d0 [ 357.496296][ T9298] do_fchmodat+0x10a/0x1b0 [ 357.501206][ T9298] __x64_sys_chmod+0x5e/0x80 [ 357.505909][ T9298] do_syscall_64+0x106/0xf80 [ 357.510609][ T9298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.336435][ T9357] input: ¶š9ã%v”ûJ,6Ö‘ as /devices/virtual/input/input13 [ 360.185930][ T9379] page: refcount:22 mapcount:0 mapping:0000000000000000 index:0xffff888078006000 pfn:0x78000 [ 360.197787][ T9379] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 360.206691][ T9379] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 360.226017][ T9379] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 360.238980][ T9379] raw: ffff888078006000 0000000000000000 00000016ffffffff 0000000000000000 [ 360.315317][ T9379] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 360.342770][ T9379] head: ffff888078006000 0000000000000000 00000016ffffffff 0000000000000000 [ 360.512271][ T9379] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 360.546418][ T9379] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 360.591029][ T9379] page dumped because: unmovable page [ 360.660376][ T9379] page_owner tracks the page as allocated [ 360.729152][ T9379] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 5487, tgid 5487 (dhcpcd), ts 64294205889, free_ts 61451342519 [ 360.815341][ T9379] post_alloc_hook+0x1e1/0x250 [ 360.857059][ T9379] get_page_from_freelist+0x111d/0x3140 [ 360.910307][ T9379] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 360.938965][ T9379] alloc_pages_mpol+0x1fb/0x550 [ 360.959495][ T9379] alloc_pages_noprof+0x131/0x390 [ 360.979341][ T9379] skb_page_frag_refill+0x365/0x5b0 [ 360.985218][ T9379] try_fill_recv+0x7f1/0x2950 [ 360.990331][ T9379] virtnet_open+0x5f2/0x960 [ 361.028770][ T9379] __dev_open+0x3ad/0x960 [ 361.033456][ T9379] __dev_change_flags+0x558/0x6f0 [ 361.039415][ T9379] netif_change_flags+0x8d/0x160 [ 361.059578][ T9379] dev_change_flags+0xba/0x250 [ 361.064820][ T9379] devinet_ioctl+0x110b/0x1f10 [ 361.070891][ T9379] inet_ioctl+0x3aa/0x3f0 [ 361.075600][ T9379] sock_do_ioctl+0x118/0x280 [ 361.080361][ T9379] sock_ioctl+0x599/0x6b0 [ 361.085032][ T9379] page last free pid 5489 tgid 5489 stack trace: [ 361.091909][ T9379] __free_frozen_pages+0x822/0x1130 [ 361.098535][ T9379] __put_partials+0x127/0x160 [ 361.103669][ T9379] qlist_free_all+0x47/0xe0 [ 361.147661][ T9379] kasan_quarantine_reduce+0x1a0/0x1f0 [ 361.174286][ T9379] __kasan_slab_alloc+0x69/0x90 [ 361.184047][ T9379] __kmalloc_cache_noprof+0x2e1/0x810 [ 361.201007][ T9379] tomoyo_init_log+0x1a0/0x20c0 [ 361.209392][ T9379] tomoyo_supervisor+0x506/0x1340 [ 361.227056][ T9379] tomoyo_path_number_perm+0x445/0x580 [ 361.242074][ T9379] security_path_chmod+0x121/0x2c0 [ 361.256595][ T9379] chmod_common+0x19a/0x4d0 [ 361.265456][ T9379] do_fchmodat+0x10a/0x1b0 [ 361.278947][ T9379] __x64_sys_chmod+0x5e/0x80 [ 361.292719][ T9379] do_syscall_64+0x106/0xf80 [ 361.309960][ T9379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.274778][ T9410] nvme_fcloop: unknown parameter or missing value 'Ù' [ 363.692136][ T9409] rtc_cmos 00:00: Alarms can be up to one day in the future [ 363.740964][ T5918] rtc_cmos 00:00: Alarms can be up to one day in the future [ 363.759870][ T5918] rtc_cmos 00:00: Alarms can be up to one day in the future [ 363.791212][ T5918] rtc_cmos 00:00: Alarms can be up to one day in the future [ 363.800518][ T5918] rtc_cmos 00:00: Alarms can be up to one day in the future [ 363.808936][ T5918] rtc rtc0: __rtc_set_alarm: err=-22 [ 365.183412][ T9467] page: refcount:22 mapcount:0 mapping:0000000000000000 index:0xffff888078006000 pfn:0x78000 [ 365.263882][ T9467] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 365.277690][ T9467] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 365.285417][ T9467] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 365.332042][ T9467] raw: ffff888078006000 0000000000000000 00000016ffffffff 0000000000000000 [ 365.365423][ T9467] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 365.425697][ T9473] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' [ 365.444478][ T9467] head: ffff888078006000 0000000000000000 00000016ffffffff 0000000000000000 [ 365.454302][ T9473] CPU: 0 UID: 0 PID: 9473 Comm: syz.1.651 Tainted: G L syzkaller #0 PREEMPT(full) [ 365.454349][ T9473] Tainted: [L]=SOFTLOCKUP [ 365.454359][ T9473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 365.454375][ T9473] Call Trace: [ 365.454385][ T9473] [ 365.454395][ T9473] dump_stack_lvl+0x100/0x190 [ 365.454441][ T9473] sysfs_warn_dup.cold+0x1c/0x28 [ 365.454479][ T9473] sysfs_do_create_link_sd+0x113/0x140 [ 365.454518][ T9473] sysfs_create_link+0x61/0xc0 [ 365.454565][ T9473] device_add+0x675/0x1950 [ 365.454603][ T9473] ? __pfx_device_add+0x10/0x10 [ 365.454628][ T9473] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 365.454666][ T9473] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 365.454712][ T9473] wiphy_register+0x1e58/0x2d30 [ 365.454744][ T9473] ? __rtnl_unlock+0xb9/0xf0 [ 365.454788][ T9473] ? __pfx_wiphy_register+0x10/0x10 [ 365.454824][ T9473] ? __asan_memset+0x23/0x50 [ 365.454868][ T9473] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 365.454916][ T9473] ieee80211_register_hw+0x2c11/0x4040 [ 365.454969][ T9473] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 365.455001][ T9473] ? __pfx___debug_object_init+0x10/0x10 [ 365.455067][ T9473] ? find_held_lock+0x2b/0x80 [ 365.455106][ T9473] ? net_generic+0xea/0x2a0 [ 365.455149][ T9473] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 365.455189][ T9473] ? __hrtimer_setup+0x178/0x280 [ 365.455223][ T9473] mac80211_hwsim_new_radio+0x2847/0x57c0 [ 365.455281][ T9473] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 365.455325][ T9473] hwsim_new_radio_nl+0xc1f/0x1340 [ 365.455353][ T9473] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc8/0x290 [ 365.455399][ T9473] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 365.455441][ T9473] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x290 [ 365.455479][ T9473] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b4/0x290 [ 365.455535][ T9473] genl_family_rcv_msg_doit+0x214/0x300 [ 365.455579][ T9473] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 365.455619][ T9473] ? genl_get_cmd+0x3ef/0x720 [ 365.455665][ T9473] ? bpf_lsm_capable+0x9/0x10 [ 365.455699][ T9473] ? security_capable+0x80/0x260 [ 365.455741][ T9473] ? ns_capable+0xd2/0xf0 [ 365.455780][ T9473] genl_rcv_msg+0x560/0x800 [ 365.455821][ T9473] ? __pfx_genl_rcv_msg+0x10/0x10 [ 365.455858][ T9473] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 365.455894][ T9473] netlink_rcv_skb+0x159/0x420 [ 365.455923][ T9473] ? __pfx_genl_rcv_msg+0x10/0x10 [ 365.455957][ T9473] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 365.455999][ T9473] ? netlink_deliver_tap+0x1ae/0xcc0 [ 365.456030][ T9473] genl_rcv+0x28/0x40 [ 365.456057][ T9473] netlink_unicast+0x5aa/0x870 [ 365.456089][ T9473] ? __pfx_netlink_unicast+0x10/0x10 [ 365.456117][ T9473] ? __pfx___might_resched+0x10/0x10 [ 365.456151][ T9473] ? __lock_acquire+0x4a5/0x2630 [ 365.456191][ T9473] netlink_sendmsg+0x8b0/0xda0 [ 365.456234][ T9473] ? __pfx_netlink_sendmsg+0x10/0x10 [ 365.456267][ T9473] ? __import_iovec+0x1d2/0x640 [ 365.456302][ T9473] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 365.456349][ T9473] ____sys_sendmsg+0xa54/0xc30 [ 365.456394][ T9473] ? __pfx_____sys_sendmsg+0x10/0x10 [ 365.456440][ T9473] ? try_to_wake_up+0x644/0x1a80 [ 365.456488][ T9473] ___sys_sendmsg+0x190/0x1e0 [ 365.456545][ T9473] ? __pfx____sys_sendmsg+0x10/0x10 [ 365.456589][ T9473] ? futex_private_hash_put+0x107/0x1c0 [ 365.456681][ T9473] __sys_sendmsg+0x170/0x220 [ 365.456714][ T9473] ? __pfx___sys_sendmsg+0x10/0x10 [ 365.456745][ T9473] ? __x64_sys_futex+0x34f/0x4d0 [ 365.456797][ T9473] do_syscall_64+0x106/0xf80 [ 365.456837][ T9473] ? clear_bhb_loop+0x40/0x90 [ 365.456872][ T9473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.456901][ T9473] RIP: 0033:0x7ff533f9bf79 [ 365.456925][ T9473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.456953][ T9473] RSP: 002b:00007ff534f3c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 365.456982][ T9473] RAX: ffffffffffffffda RBX: 00007ff534215fa0 RCX: 00007ff533f9bf79 [ 365.457000][ T9473] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 365.457018][ T9473] RBP: 00007ff5340327e0 R08: 0000000000000000 R09: 0000000000000000 [ 365.457036][ T9473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 365.457053][ T9473] R13: 00007ff534216038 R14: 00007ff534215fa0 R15: 00007ffd19458138 [ 365.457091][ T9473] [ 366.139977][ T9467] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 366.259130][ T9467] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 366.336007][ T9467] page dumped because: unmovable page [ 366.377738][ T9467] page_owner tracks the page as allocated [ 366.403885][ T9467] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 5487, tgid 5487 (dhcpcd), ts 64294205889, free_ts 61451342519 [ 366.438364][ T9467] post_alloc_hook+0x1e1/0x250 [ 366.458036][ T9467] get_page_from_freelist+0x111d/0x3140 [ 366.508859][ T9467] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 366.515087][ T9467] alloc_pages_mpol+0x1fb/0x550 [ 366.607539][ T9467] alloc_pages_noprof+0x131/0x390 [ 366.626203][ T9467] skb_page_frag_refill+0x365/0x5b0 [ 366.644775][ T9467] try_fill_recv+0x7f1/0x2950 [ 366.657631][ T9467] virtnet_open+0x5f2/0x960 [ 366.662498][ T9467] __dev_open+0x3ad/0x960 [ 366.687194][ T9467] __dev_change_flags+0x558/0x6f0 [ 366.703549][ T9467] netif_change_flags+0x8d/0x160 [ 366.708843][ T9467] dev_change_flags+0xba/0x250 [ 366.718153][ T9467] devinet_ioctl+0x110b/0x1f10 [ 366.723138][ T9467] inet_ioctl+0x3aa/0x3f0 [ 366.733393][ T9467] sock_do_ioctl+0x118/0x280 [ 366.743737][ T9467] sock_ioctl+0x599/0x6b0 [ 366.767576][ T9467] page last free pid 5489 tgid 5489 stack trace: [ 366.779317][ T9467] __free_frozen_pages+0x822/0x1130 [ 366.786366][ T9467] __put_partials+0x127/0x160 [ 366.794529][ T9467] qlist_free_all+0x47/0xe0 [ 366.804710][ T9467] kasan_quarantine_reduce+0x1a0/0x1f0 [ 366.811467][ T9467] __kasan_slab_alloc+0x69/0x90 [ 366.822674][ T9467] __kmalloc_cache_noprof+0x2e1/0x810 [ 366.830709][ T9467] tomoyo_init_log+0x1a0/0x20c0 [ 366.838649][ T9467] tomoyo_supervisor+0x506/0x1340 [ 366.845752][ T9467] tomoyo_path_number_perm+0x445/0x580 [ 366.852091][ T9467] security_path_chmod+0x121/0x2c0 [ 366.858216][ T9467] chmod_common+0x19a/0x4d0 [ 366.865035][ T9467] do_fchmodat+0x10a/0x1b0 [ 366.870560][ T9467] __x64_sys_chmod+0x5e/0x80 [ 366.875504][ T9467] do_syscall_64+0x106/0xf80 [ 366.881024][ T9467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.913369][ T9507] page: refcount:22 mapcount:0 mapping:0000000000000000 index:0xffff888078006000 pfn:0x78000 [ 367.933860][ T9507] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 368.022929][ T9507] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 368.037689][ T9507] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 368.098714][ T9507] raw: ffff888078006000 0000000000000000 00000016ffffffff 0000000000000000 [ 368.148205][ T9507] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 368.204058][ T9507] head: ffff888078006000 0000000000000000 00000016ffffffff 0000000000000000 [ 368.255153][ T9507] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 368.269153][ T9507] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 368.279786][ T9507] page dumped because: unmovable page [ 368.285300][ T9507] page_owner tracks the page as allocated [ 368.313296][ T9507] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 5487, tgid 5487 (dhcpcd), ts 64294205889, free_ts 61451342519 [ 368.349966][ T9507] post_alloc_hook+0x1e1/0x250 [ 368.367650][ T9507] get_page_from_freelist+0x111d/0x3140 [ 368.381819][ T9507] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 368.397906][ T9507] alloc_pages_mpol+0x1fb/0x550 [ 368.407105][ T9507] alloc_pages_noprof+0x131/0x390 [ 368.422930][ T9507] skb_page_frag_refill+0x365/0x5b0 [ 368.430913][ T9507] try_fill_recv+0x7f1/0x2950 [ 368.437728][ T9507] virtnet_open+0x5f2/0x960 [ 368.456308][ T9507] __dev_open+0x3ad/0x960 [ 368.487610][ T9507] __dev_change_flags+0x558/0x6f0 [ 368.503161][ T9507] netif_change_flags+0x8d/0x160 [ 368.539916][ T9507] dev_change_flags+0xba/0x250 [ 368.561125][ T9507] devinet_ioctl+0x110b/0x1f10 [ 368.596845][ T9507] inet_ioctl+0x3aa/0x3f0 [ 368.615482][ T9507] sock_do_ioctl+0x118/0x280 [ 368.633015][ T9507] sock_ioctl+0x599/0x6b0 [ 368.650269][ T9507] page last free pid 5489 tgid 5489 stack trace: [ 368.690447][ T9507] __free_frozen_pages+0x822/0x1130 [ 368.696232][ T9507] __put_partials+0x127/0x160 [ 368.712679][ T9507] qlist_free_all+0x47/0xe0 [ 368.717347][ T9507] kasan_quarantine_reduce+0x1a0/0x1f0 [ 368.730709][ T9507] __kasan_slab_alloc+0x69/0x90 [ 368.735854][ T9507] __kmalloc_cache_noprof+0x2e1/0x810 [ 368.787496][ T9507] tomoyo_init_log+0x1a0/0x20c0 [ 368.793523][ T9507] tomoyo_supervisor+0x506/0x1340 [ 368.807811][ T9507] tomoyo_path_number_perm+0x445/0x580 [ 368.814468][ T9507] security_path_chmod+0x121/0x2c0 [ 368.822853][ T9507] chmod_common+0x19a/0x4d0 [ 368.834841][ T9507] do_fchmodat+0x10a/0x1b0 [ 368.840673][ T9507] __x64_sys_chmod+0x5e/0x80 [ 368.845467][ T9507] do_syscall_64+0x106/0xf80 [ 368.857979][ T9507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.083672][ T9516] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 369.466566][ T9496] Process accounting resumed [ 369.992825][ T9517] Process accounting resumed [ 371.467387][ T9550] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 372.448086][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 372.941150][ T9574] page: refcount:22 mapcount:0 mapping:0000000000000000 index:0xffff888078006000 pfn:0x78000 [ 372.996872][ T9574] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 373.037523][ T9574] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 373.087601][ T9574] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 373.158076][ T9574] raw: ffff888078006000 0000000000000000 00000016ffffffff 0000000000000000 [ 373.183586][ T9574] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 373.230396][ T9574] head: ffff888078006000 0000000000000000 00000016ffffffff 0000000000000000 [ 373.308710][ T9574] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 373.387555][ T9574] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 373.396412][ T9574] page dumped because: unmovable page [ 373.427744][ T9574] page_owner tracks the page as allocated [ 373.455870][ T9574] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 5487, tgid 5487 (dhcpcd), ts 64294205889, free_ts 61451342519 [ 373.520624][ T9574] post_alloc_hook+0x1e1/0x250 [ 373.541264][ T9574] get_page_from_freelist+0x111d/0x3140 [ 373.564966][ T9574] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 373.614216][ T9574] alloc_pages_mpol+0x1fb/0x550 [ 373.681379][ T9574] alloc_pages_noprof+0x131/0x390 [ 373.696971][ T9574] skb_page_frag_refill+0x365/0x5b0 [ 373.717007][ T9574] try_fill_recv+0x7f1/0x2950 [ 373.735138][ T9574] virtnet_open+0x5f2/0x960 [ 373.757613][ T9574] __dev_open+0x3ad/0x960 [ 373.765634][ T9574] __dev_change_flags+0x558/0x6f0 [ 373.787594][ T9574] netif_change_flags+0x8d/0x160 [ 373.804875][ T9574] dev_change_flags+0xba/0x250 [ 373.837699][ T9574] devinet_ioctl+0x110b/0x1f10 [ 373.842798][ T9574] inet_ioctl+0x3aa/0x3f0 [ 373.876204][ T9574] sock_do_ioctl+0x118/0x280 [ 373.881417][ T9574] sock_ioctl+0x599/0x6b0 [ 373.891624][ T9574] page last free pid 5489 tgid 5489 stack trace: [ 373.898926][ T9574] __free_frozen_pages+0x822/0x1130 [ 373.912276][ T9574] __put_partials+0x127/0x160 [ 373.947681][ T9574] qlist_free_all+0x47/0xe0 [ 373.952588][ T9574] kasan_quarantine_reduce+0x1a0/0x1f0 [ 373.983779][ T9574] __kasan_slab_alloc+0x69/0x90 [ 374.004226][ T9574] __kmalloc_cache_noprof+0x2e1/0x810 [ 374.036150][ T9574] tomoyo_init_log+0x1a0/0x20c0 [ 374.046438][ T9574] tomoyo_supervisor+0x506/0x1340 [ 374.058980][ T9574] tomoyo_path_number_perm+0x445/0x580 [ 374.076898][ T9574] security_path_chmod+0x121/0x2c0 [ 374.095736][ T9574] chmod_common+0x19a/0x4d0 [ 374.106130][ T9574] do_fchmodat+0x10a/0x1b0 [ 374.111712][ T9574] __x64_sys_chmod+0x5e/0x80 [ 374.118910][ T9574] do_syscall_64+0x106/0xf80 [ 374.133735][ T9574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.268188][ T9587] ================================================================== [ 374.268211][ T9587] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 374.268260][ T9587] Write of size 8 at addr ffffc90003599040 by task syz.2.668/9587 [ 374.268288][ T9587] [ 374.268307][ T9587] CPU: 0 UID: 0 PID: 9587 Comm: syz.2.668 Tainted: G L syzkaller #0 PREEMPT(full) [ 374.268352][ T9587] Tainted: [L]=SOFTLOCKUP [ 374.268363][ T9587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 374.268381][ T9587] Call Trace: [ 374.268392][ T9587] [ 374.268404][ T9587] dump_stack_lvl+0x100/0x190 [ 374.268447][ T9587] print_report+0x156/0x4c9 [ 374.268501][ T9587] ? __virt_addr_valid+0x81/0x620 [ 374.268535][ T9587] ? sys_imageblit+0x19fb/0x1d60 [ 374.268569][ T9587] kasan_report+0xdf/0x1a0 [ 374.268605][ T9587] ? sys_imageblit+0x19fb/0x1d60 [ 374.268645][ T9587] sys_imageblit+0x19fb/0x1d60 [ 374.268686][ T9587] ? __pfx_sys_imageblit+0x10/0x10 [ 374.268724][ T9587] ? prb_read_valid+0x78/0xa0 [ 374.268755][ T9587] ? __pfx_prb_read_valid+0x10/0x10 [ 374.268790][ T9587] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 374.268832][ T9587] soft_cursor+0x524/0xa10 [ 374.268865][ T9587] ? fb_get_color_depth+0x120/0x250 [ 374.268912][ T9587] bit_cursor+0xe58/0x16f0 [ 374.268943][ T9587] ? __pfx_bit_cursor+0x10/0x10 [ 374.268968][ T9587] ? __lock_acquire+0x4a5/0x2630 [ 374.269001][ T9587] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 374.269041][ T9587] ? get_color+0x1da/0x450 [ 374.269083][ T9587] ? __pfx_bit_cursor+0x10/0x10 [ 374.269111][ T9587] fbcon_cursor+0x43c/0x5e0 [ 374.269154][ T9587] ? add_softcursor+0x220/0x290 [ 374.269185][ T9587] set_cursor+0x1db/0x250 [ 374.269212][ T9587] con_write+0x89/0xb0 [ 374.269246][ T9587] n_tty_write+0x44f/0x12d0 [ 374.269294][ T9587] ? __pfx_n_tty_write+0x10/0x10 [ 374.269337][ T9587] ? __pfx_woken_wake_function+0x10/0x10 [ 374.269376][ T9587] ? file_tty_write.isra.0+0x64e/0x890 [ 374.269412][ T9587] ? __pfx_n_tty_write+0x10/0x10 [ 374.269454][ T9587] file_tty_write.isra.0+0x4d2/0x890 [ 374.269503][ T9587] redirected_tty_write+0xd4/0x120 [ 374.269538][ T9587] vfs_write+0x6ac/0x1070 [ 374.269567][ T9587] ? __pfx_redirected_tty_write+0x10/0x10 [ 374.269616][ T9587] ? __pfx_vfs_write+0x10/0x10 [ 374.269644][ T9587] ? find_held_lock+0x2b/0x80 [ 374.269706][ T9587] ksys_write+0x12a/0x250 [ 374.269734][ T9587] ? __pfx_ksys_write+0x10/0x10 [ 374.269767][ T9587] do_syscall_64+0x106/0xf80 [ 374.269823][ T9587] ? clear_bhb_loop+0x40/0x90 [ 374.269857][ T9587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.269889][ T9587] RIP: 0033:0x7fc24059bf79 [ 374.269913][ T9587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.269945][ T9587] RSP: 002b:00007fc23e7d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 374.269986][ T9587] RAX: ffffffffffffffda RBX: 00007fc240816180 RCX: 00007fc24059bf79 [ 374.270007][ T9587] RDX: 0000000000000892 RSI: 0000200000001a00 RDI: 0000000000000005 [ 374.270026][ T9587] RBP: 00007fc2406327e0 R08: 0000000000000000 R09: 0000000000000000 [ 374.270044][ T9587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.270063][ T9587] R13: 00007fc240816218 R14: 00007fc240816180 R15: 00007fffa3a53648 [ 374.270100][ T9587] [ 374.270112][ T9587] [ 374.270121][ T9587] The buggy address belongs to a 4-page vmalloc region starting at 0xffffc9000359a000 allocated at vcalloc_noprof+0x43/0x70 [ 374.270178][ T9587] Memory state around the buggy address: [ 374.270196][ T9587] ffffc90003598f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 374.270219][ T9587] ffffc90003598f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 374.270241][ T9587] >ffffc90003599000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 374.270259][ T9587] ^ [ 374.270276][ T9587] ffffc90003599080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 374.270303][ T9587] ffffc90003599100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 374.270322][ T9587] ================================================================== [ 374.270339][ T9587] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 374.270362][ T9587] CPU: 0 UID: 0 PID: 9587 Comm: syz.2.668 Tainted: G L syzkaller #0 PREEMPT(full) [ 374.270404][ T9587] Tainted: [L]=SOFTLOCKUP [ 374.270416][ T9587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 374.270433][ T9587] Call Trace: [ 374.270444][ T9587] [ 374.270456][ T9587] dump_stack_lvl+0x100/0x190 [ 374.270517][ T9587] vpanic+0x20d/0x630 [ 374.270545][ T9587] panic+0xd1/0xd1 [ 374.270572][ T9587] ? __pfx_panic+0x10/0x10 [ 374.270605][ T9587] ? sys_imageblit+0x19fb/0x1d60 [ 374.270644][ T9587] check_panic_on_warn.cold+0x19/0x34 [ 374.270677][ T9587] end_report.part.0+0x3a/0x90 [ 374.270724][ T9587] kasan_report.cold+0xe/0x18 [ 374.270767][ T9587] ? sys_imageblit+0x19fb/0x1d60 [ 374.270815][ T9587] sys_imageblit+0x19fb/0x1d60 [ 374.270855][ T9587] ? __pfx_sys_imageblit+0x10/0x10 [ 374.270893][ T9587] ? prb_read_valid+0x78/0xa0 [ 374.270924][ T9587] ? __pfx_prb_read_valid+0x10/0x10 [ 374.270962][ T9587] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 374.271004][ T9587] soft_cursor+0x524/0xa10 [ 374.271036][ T9587] ? fb_get_color_depth+0x120/0x250 [ 374.271085][ T9587] bit_cursor+0xe58/0x16f0 [ 374.271120][ T9587] ? __pfx_bit_cursor+0x10/0x10 [ 374.271150][ T9587] ? __lock_acquire+0x4a5/0x2630 [ 374.271184][ T9587] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 374.271224][ T9587] ? get_color+0x1da/0x450 [ 374.271267][ T9587] ? __pfx_bit_cursor+0x10/0x10 [ 374.271294][ T9587] fbcon_cursor+0x43c/0x5e0 [ 374.271337][ T9587] ? add_softcursor+0x220/0x290 [ 374.271367][ T9587] set_cursor+0x1db/0x250 [ 374.271393][ T9587] con_write+0x89/0xb0 [ 374.271428][ T9587] n_tty_write+0x44f/0x12d0 [ 374.271485][ T9587] ? __pfx_n_tty_write+0x10/0x10 [ 374.271529][ T9587] ? __pfx_woken_wake_function+0x10/0x10 [ 374.271568][ T9587] ? file_tty_write.isra.0+0x64e/0x890 [ 374.271606][ T9587] ? __pfx_n_tty_write+0x10/0x10 [ 374.271649][ T9587] file_tty_write.isra.0+0x4d2/0x890 [ 374.271690][ T9587] redirected_tty_write+0xd4/0x120 [ 374.271726][ T9587] vfs_write+0x6ac/0x1070 [ 374.271754][ T9587] ? __pfx_redirected_tty_write+0x10/0x10 [ 374.271788][ T9587] ? __pfx_vfs_write+0x10/0x10 [ 374.271816][ T9587] ? find_held_lock+0x2b/0x80 [ 374.271868][ T9587] ksys_write+0x12a/0x250 [ 374.271899][ T9587] ? __pfx_ksys_write+0x10/0x10 [ 374.271933][ T9587] do_syscall_64+0x106/0xf80 [ 374.271979][ T9587] ? clear_bhb_loop+0x40/0x90 [ 374.272012][ T9587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.272044][ T9587] RIP: 0033:0x7fc24059bf79 [ 374.272067][ T9587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.272097][ T9587] RSP: 002b:00007fc23e7d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 374.272127][ T9587] RAX: ffffffffffffffda RBX: 00007fc240816180 RCX: 00007fc24059bf79 [ 374.272148][ T9587] RDX: 0000000000000892 RSI: 0000200000001a00 RDI: 0000000000000005 [ 374.272168][ T9587] RBP: 00007fc2406327e0 R08: 0000000000000000 R09: 0000000000000000 [ 374.272187][ T9587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.272205][ T9587] R13: 00007fc240816218 R14: 00007fc240816180 R15: 00007fffa3a53648 [ 374.272236][ T9587] [ 374.272914][ T9587] Kernel Offset: disabled